{
  "threat_severity" : "Important",
  "public_date" : "2026-03-18T02:29:45Z",
  "bugzilla" : {
    "description" : "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion",
    "id" : "2448553",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
  },
  "cvss3" : {
    "cvss3_base_score" : "7.5",
    "cvss3_scoring_vector" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
    "status" : "verified"
  },
  "cwe" : "CWE-835",
  "details" : [ "pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested `SEQUENCE` (`0x30`) or `SET` (`0x31`) tags with \"Indefinite Length\" (`0x80`) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a `RecursionError` or consumes all available memory (OOM), crashing the host application. This is a distinct vulnerability from CVE-2026-23490 (which addressed integer overflows in OID decoding). The fix for CVE-2026-23490 (`MAX_OID_ARC_CONTINUATION_OCTETS`) does not mitigate this recursion issue. Version 0.6.3 fixes this specific issue.", "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application." ],
  "affected_release" : [ {
    "product_name" : "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
    "release_date" : "2026-05-04T00:00:00Z",
    "advisory" : "RHSA-2026:13512",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.5::el8",
    "package" : "python3.12-pyasn1-0:0.6.3-1.el8ap"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
    "release_date" : "2026-06-09T00:00:00Z",
    "advisory" : "RHSA-2026:24761",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.5::el8",
    "package" : "automation-controller-0:4.6.29-2.el8ap"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
    "release_date" : "2026-05-04T00:00:00Z",
    "advisory" : "RHSA-2026:13512",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.5::el9",
    "package" : "python3.12-pyasn1-0:0.6.3-1.el9ap"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
    "release_date" : "2026-06-09T00:00:00Z",
    "advisory" : "RHSA-2026:24761",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.5::el9",
    "package" : "automation-controller-0:4.6.29-2.el9ap"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
    "release_date" : "2026-05-04T00:00:00Z",
    "advisory" : "RHSA-2026:13508",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.6::el9",
    "package" : "python3.12-pyasn1-0:0.6.3-1.el9ap"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
    "release_date" : "2026-06-09T00:00:00Z",
    "advisory" : "RHSA-2026:24762",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.6::el9",
    "package" : "automation-controller-0:4.7.12-1.el9ap"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "release_date" : "2026-05-06T00:00:00Z",
    "advisory" : "RHSA-2026:13916",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10.1",
    "package" : "fence-agents-0:4.16.0-13.el10_1.4"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "release_date" : "2026-05-19T00:00:00Z",
    "advisory" : "RHSA-2026:19138",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10.2",
    "package" : "fence-agents-0:4.16.0-21.el10_2.1"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10.0 Extended Update Support",
    "release_date" : "2026-05-13T00:00:00Z",
    "advisory" : "RHSA-2026:17083",
    "cpe" : "cpe:/o:redhat:enterprise_linux_eus:10.0",
    "package" : "fence-agents-0:4.16.0-5.el10_0.9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12176",
    "cpe" : "cpe:/a:redhat:enterprise_linux:8",
    "package" : "fence-agents-0:4.2.1-129.el8_10.25"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "release_date" : "2026-05-06T00:00:00Z",
    "advisory" : "RHSA-2026:13902",
    "cpe" : "cpe:/a:redhat:enterprise_linux:8::highavailability",
    "package" : "resource-agents-0:4.9.0-54.el8_10.33"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
    "release_date" : "2026-06-01T00:00:00Z",
    "advisory" : "RHSA-2026:22135",
    "cpe" : "cpe:/a:redhat:rhel_aus:8.4",
    "package" : "fence-agents-0:4.2.1-65.el8_4.28"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
    "release_date" : "2026-06-01T00:00:00Z",
    "advisory" : "RHSA-2026:22133",
    "cpe" : "cpe:/a:redhat:rhel_aus:8.4::highavailability",
    "package" : "resource-agents-0:4.1.1-90.el8_4.25"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
    "release_date" : "2026-06-01T00:00:00Z",
    "advisory" : "RHSA-2026:22135",
    "cpe" : "cpe:/a:redhat:rhel_eus_long_life:8.4",
    "package" : "fence-agents-0:4.2.1-65.el8_4.28"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
    "release_date" : "2026-06-01T00:00:00Z",
    "advisory" : "RHSA-2026:22133",
    "cpe" : "cpe:/a:redhat:rhel_eus_long_life:8.4::highavailability",
    "package" : "resource-agents-0:4.1.1-90.el8_4.25"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
    "release_date" : "2026-06-01T00:00:00Z",
    "advisory" : "RHSA-2026:22134",
    "cpe" : "cpe:/a:redhat:rhel_aus:8.6",
    "package" : "fence-agents-0:4.2.1-89.el8_6.22"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
    "release_date" : "2026-06-01T00:00:00Z",
    "advisory" : "RHSA-2026:22134",
    "cpe" : "cpe:/a:redhat:rhel_tus:8.6",
    "package" : "fence-agents-0:4.2.1-89.el8_6.22"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
    "release_date" : "2026-06-01T00:00:00Z",
    "advisory" : "RHSA-2026:22132",
    "cpe" : "cpe:/a:redhat:rhel_tus:8.6::highavailability",
    "package" : "resource-agents-0:4.9.0-16.el8_6.22"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
    "release_date" : "2026-06-01T00:00:00Z",
    "advisory" : "RHSA-2026:22134",
    "cpe" : "cpe:/a:redhat:rhel_e4s:8.6",
    "package" : "fence-agents-0:4.2.1-89.el8_6.22"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
    "release_date" : "2026-06-01T00:00:00Z",
    "advisory" : "RHSA-2026:22132",
    "cpe" : "cpe:/a:redhat:rhel_e4s:8.6::highavailability",
    "package" : "resource-agents-0:4.9.0-16.el8_6.22"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
    "release_date" : "2026-05-26T00:00:00Z",
    "advisory" : "RHSA-2026:20588",
    "cpe" : "cpe:/a:redhat:rhel_tus:8.8",
    "package" : "fence-agents-0:4.2.1-112.el8_8.17"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
    "release_date" : "2026-06-01T00:00:00Z",
    "advisory" : "RHSA-2026:22131",
    "cpe" : "cpe:/a:redhat:rhel_tus:8.8::highavailability",
    "package" : "resource-agents-0:4.9.0-40.el8_8.19"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
    "release_date" : "2026-05-26T00:00:00Z",
    "advisory" : "RHSA-2026:20588",
    "cpe" : "cpe:/a:redhat:rhel_e4s:8.8",
    "package" : "fence-agents-0:4.2.1-112.el8_8.17"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
    "release_date" : "2026-06-01T00:00:00Z",
    "advisory" : "RHSA-2026:22131",
    "cpe" : "cpe:/a:redhat:rhel_e4s:8.8::highavailability",
    "package" : "resource-agents-0:4.9.0-40.el8_8.19"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2026-05-06T00:00:00Z",
    "advisory" : "RHSA-2026:13917",
    "cpe" : "cpe:/a:redhat:enterprise_linux:9",
    "package" : "fence-agents-0:4.10.0-98.el9_7.13"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2026-05-19T00:00:00Z",
    "advisory" : "RHSA-2026:19355",
    "cpe" : "cpe:/a:redhat:enterprise_linux:9",
    "package" : "fence-agents-0:4.10.0-110.el9_8.2"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
    "release_date" : "2026-06-03T00:00:00Z",
    "advisory" : "RHSA-2026:22987",
    "cpe" : "cpe:/a:redhat:rhel_e4s:9.2",
    "package" : "fence-agents-0:4.10.0-43.el9_2.22"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
    "release_date" : "2026-06-03T00:00:00Z",
    "advisory" : "RHSA-2026:22969",
    "cpe" : "cpe:/a:redhat:rhel_e4s:9.4",
    "package" : "fence-agents-0:4.10.0-62.el9_4.25"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9.6 Extended Update Support",
    "release_date" : "2026-06-04T00:00:00Z",
    "advisory" : "RHSA-2026:22970",
    "cpe" : "cpe:/a:redhat:rhel_eus:9.6",
    "package" : "fence-agents-0:4.10.0-86.el9_6.17"
  }, {
    "product_name" : "Red Hat AI Inference Server 3.3",
    "release_date" : "2026-05-11T00:00:00Z",
    "advisory" : "RHSA-2026:16009",
    "cpe" : "cpe:/a:redhat:ai_inference_server:3.3::el9",
    "package" : "rhaiis/vllm-rocm-rhel9:1778244531"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2.5",
    "release_date" : "2026-05-04T00:00:00Z",
    "advisory" : "RHSA-2026:13553",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.5::el8",
    "package" : "ansible-automation-platform-25/ee-supported-rhel8:1777398315"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2.5",
    "release_date" : "2026-05-04T00:00:00Z",
    "advisory" : "RHSA-2026:13553",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.5::el8",
    "package" : "ansible-automation-platform-25/lightspeed-rhel8:1777403872"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2.5",
    "release_date" : "2026-05-04T00:00:00Z",
    "advisory" : "RHSA-2026:13553",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.5::el8",
    "package" : "ansible-automation-platform-25/platform-resource-runner-rhel8:1777402264"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2.6",
    "release_date" : "2026-05-04T00:00:00Z",
    "advisory" : "RHSA-2026:13545",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.6::el9",
    "package" : "ansible-automation-platform-26/eda-controller-rhel9:1777296732"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2.6",
    "release_date" : "2026-05-04T00:00:00Z",
    "advisory" : "RHSA-2026:13545",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.6::el9",
    "package" : "ansible-automation-platform-26/gateway-rhel9:1777311120"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2.6",
    "release_date" : "2026-05-04T00:00:00Z",
    "advisory" : "RHSA-2026:13545",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.6::el9",
    "package" : "ansible-automation-platform-26/lightspeed-rhel9:1777387242"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2.6",
    "release_date" : "2026-03-31T00:00:00Z",
    "advisory" : "RHSA-2026:6309",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.6::el9",
    "package" : "ansible-automation-platform-26/lightspeed-chatbot-rhel9:1774417022"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2.6",
    "release_date" : "2026-04-01T00:00:00Z",
    "advisory" : "RHSA-2026:6404",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.6::el9",
    "package" : "ansible-automation-platform-26/lightspeed-chatbot-rhel9:1774417022"
  }, {
    "product_name" : "Red Hat Enterprise Linux AI 3.3",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17611",
    "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3.3::el9",
    "package" : "rhelai3/bootc-azure-rocm-rhel9:1778677745"
  }, {
    "product_name" : "Red Hat Enterprise Linux AI 3.3",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17611",
    "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3.3::el9",
    "package" : "rhelai3/bootc-rocm-rhel9:1778666124"
  }, {
    "product_name" : "Red Hat Migration Toolkit 1.8",
    "release_date" : "2026-07-20T00:00:00Z",
    "advisory" : "RHSA-2026:41928",
    "cpe" : "cpe:/a:redhat:rhmt:1.8::el8",
    "package" : "rhmtc/openshift-migration-hook-runner-rhel8:1783931722"
  }, {
    "product_name" : "Red Hat OpenShift AI 2.25",
    "release_date" : "2026-04-23T00:00:00Z",
    "advisory" : "RHSA-2026:10184",
    "cpe" : "cpe:/a:redhat:openshift_ai:2.25::el9",
    "package" : "rhoai/odh-kserve-storage-initializer-rhel9:1776343111"
  }, {
    "product_name" : "Red Hat OpenShift AI 3.3",
    "release_date" : "2026-05-20T00:00:00Z",
    "advisory" : "RHSA-2026:19712",
    "cpe" : "cpe:/a:redhat:openshift_ai:3.3::el9",
    "package" : "rhoai/odh-kserve-storage-initializer-rhel9:1778263407"
  }, {
    "product_name" : "Red Hat OpenShift AI 3.3",
    "release_date" : "2026-07-09T00:00:00Z",
    "advisory" : "RHSA-2026:37275",
    "cpe" : "cpe:/a:redhat:openshift_ai:3.3::el9",
    "package" : "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9:1782471672"
  }, {
    "product_name" : "Red Hat OpenShift AI 3.3",
    "release_date" : "2026-07-09T00:00:00Z",
    "advisory" : "RHSA-2026:37275",
    "cpe" : "cpe:/a:redhat:openshift_ai:3.3::el9",
    "package" : "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9:1782471731"
  }, {
    "product_name" : "Red Hat OpenShift AI 3.3",
    "release_date" : "2026-07-09T00:00:00Z",
    "advisory" : "RHSA-2026:37275",
    "cpe" : "cpe:/a:redhat:openshift_ai:3.3::el9",
    "package" : "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9:1782471849"
  }, {
    "product_name" : "Red Hat OpenShift AI 3.3",
    "release_date" : "2026-07-09T00:00:00Z",
    "advisory" : "RHSA-2026:37275",
    "cpe" : "cpe:/a:redhat:openshift_ai:3.3::el9",
    "package" : "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9:1782471734"
  }, {
    "product_name" : "Red Hat OpenShift AI 3.3",
    "release_date" : "2026-07-09T00:00:00Z",
    "advisory" : "RHSA-2026:37275",
    "cpe" : "cpe:/a:redhat:openshift_ai:3.3::el9",
    "package" : "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9:1782471879"
  }, {
    "product_name" : "Red Hat OpenShift AI 3.3",
    "release_date" : "2026-07-09T00:00:00Z",
    "advisory" : "RHSA-2026:37275",
    "cpe" : "cpe:/a:redhat:openshift_ai:3.3::el9",
    "package" : "rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9:1782472374"
  }, {
    "product_name" : "Red Hat OpenShift AI 3.3",
    "release_date" : "2026-07-09T00:00:00Z",
    "advisory" : "RHSA-2026:37275",
    "cpe" : "cpe:/a:redhat:openshift_ai:3.3::el9",
    "package" : "rhoai/odh-trustyai-nemo-guardrails-server-rhel9:1782471606"
  }, {
    "product_name" : "Red Hat OpenShift AI 3.3",
    "release_date" : "2026-07-09T00:00:00Z",
    "advisory" : "RHSA-2026:37275",
    "cpe" : "cpe:/a:redhat:openshift_ai:3.3::el9",
    "package" : "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9:1782471796"
  }, {
    "product_name" : "Red Hat OpenShift AI 3.3",
    "release_date" : "2026-07-09T00:00:00Z",
    "advisory" : "RHSA-2026:37275",
    "cpe" : "cpe:/a:redhat:openshift_ai:3.3::el9",
    "package" : "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9:1782471661"
  }, {
    "product_name" : "Red Hat OpenShift AI 3.3",
    "release_date" : "2026-07-09T00:00:00Z",
    "advisory" : "RHSA-2026:37275",
    "cpe" : "cpe:/a:redhat:openshift_ai:3.3::el9",
    "package" : "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9:1782471753"
  }, {
    "product_name" : "Red Hat OpenShift AI 3.3",
    "release_date" : "2026-07-09T00:00:00Z",
    "advisory" : "RHSA-2026:37275",
    "cpe" : "cpe:/a:redhat:openshift_ai:3.3::el9",
    "package" : "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9:1782471740"
  }, {
    "product_name" : "Red Hat OpenShift AI 3.3",
    "release_date" : "2026-07-09T00:00:00Z",
    "advisory" : "RHSA-2026:37275",
    "cpe" : "cpe:/a:redhat:openshift_ai:3.3::el9",
    "package" : "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9:1782471834"
  }, {
    "product_name" : "Red Hat OpenShift AI 3.3",
    "release_date" : "2026-07-09T00:00:00Z",
    "advisory" : "RHSA-2026:37275",
    "cpe" : "cpe:/a:redhat:openshift_ai:3.3::el9",
    "package" : "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9:1782471730"
  }, {
    "product_name" : "Red Hat OpenShift AI 3.3",
    "release_date" : "2026-07-09T00:00:00Z",
    "advisory" : "RHSA-2026:37275",
    "cpe" : "cpe:/a:redhat:openshift_ai:3.3::el9",
    "package" : "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9:1782471835"
  }, {
    "product_name" : "Red Hat OpenShift AI 3.3",
    "release_date" : "2026-07-09T00:00:00Z",
    "advisory" : "RHSA-2026:37275",
    "cpe" : "cpe:/a:redhat:openshift_ai:3.3::el9",
    "package" : "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9:1782471697"
  }, {
    "product_name" : "Red Hat Quay 3.1",
    "release_date" : "2026-04-07T00:00:00Z",
    "advisory" : "RHSA-2026:6912",
    "cpe" : "cpe:/a:redhat:quay:3.10::el8",
    "package" : "quay/quay-rhel8:1775169155"
  }, {
    "product_name" : "Red Hat Quay 3.12",
    "release_date" : "2026-04-06T00:00:00Z",
    "advisory" : "RHSA-2026:6720",
    "cpe" : "cpe:/a:redhat:quay:3.12::el8",
    "package" : "quay/quay-rhel8:1775253092"
  }, {
    "product_name" : "Red Hat Quay 3.15",
    "release_date" : "2026-04-03T00:00:00Z",
    "advisory" : "RHSA-2026:6568",
    "cpe" : "cpe:/a:redhat:quay:3.15::el8",
    "package" : "quay/quay-rhel8:1775169219"
  }, {
    "product_name" : "Red Hat Quay 3.16",
    "release_date" : "2026-05-19T00:00:00Z",
    "advisory" : "RHSA-2026:19375",
    "cpe" : "cpe:/a:redhat:quay:3.16::el9",
    "package" : "quay/quay-rhel9:1779204086"
  }, {
    "product_name" : "Red Hat Quay 3.9",
    "release_date" : "2026-04-07T00:00:00Z",
    "advisory" : "RHSA-2026:6926",
    "cpe" : "cpe:/a:redhat:quay:3.9::el8",
    "package" : "quay/quay-rhel8:1775169218"
  }, {
    "product_name" : "Red Hat Trusted Artifact Signer 1.4",
    "release_date" : "2026-04-16T00:00:00Z",
    "advisory" : "RHSA-2026:8437",
    "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1.4::el9",
    "package" : "rhtas/model-transparency-rhel9:1775815407"
  }, {
    "product_name" : "Service Telemetry Framework 1.5",
    "release_date" : "2026-05-06T00:00:00Z",
    "advisory" : "RHSA-2026:14020",
    "cpe" : "cpe:/a:redhat:stf:1.5::el9",
    "package" : "stf/prometheus-webhook-snmp-rhel9:1777452540"
  }, {
    "product_name" : "Service Telemetry Framework 1.5",
    "release_date" : "2026-05-06T00:00:00Z",
    "advisory" : "RHSA-2026:14020",
    "cpe" : "cpe:/a:redhat:stf:1.5::el9",
    "package" : "stf/service-telemetry-rhel9-operator:1777407251"
  }, {
    "product_name" : "Service Telemetry Framework 1.5",
    "release_date" : "2026-05-06T00:00:00Z",
    "advisory" : "RHSA-2026:14020",
    "cpe" : "cpe:/a:redhat:stf:1.5::el9",
    "package" : "stf/smart-gateway-rhel9-operator:1777436150"
  } ],
  "package_state" : [ {
    "product_name" : "Migration Toolkit for Containers",
    "fix_state" : "Affected",
    "package_name" : "rhmtc/openshift-migration-rhel8-operator",
    "cpe" : "cpe:/a:redhat:rhmt:1"
  }, {
    "product_name" : "Migration Toolkit for Virtualization",
    "fix_state" : "Will not fix",
    "package_name" : "migration-toolkit-virtualization/mtv-rhel9-operator",
    "cpe" : "cpe:/a:redhat:migration_toolkit_virtualization:2"
  }, {
    "product_name" : "Migration Toolkit for Virtualization",
    "fix_state" : "Will not fix",
    "package_name" : "mtv-candidate/mtv-rhel9-operator",
    "cpe" : "cpe:/a:redhat:migration_toolkit_virtualization:2"
  }, {
    "product_name" : "OpenShift Lightspeed",
    "fix_state" : "Will not fix",
    "package_name" : "openshift-lightspeed/lightspeed-service-api-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_lightspeed"
  }, {
    "product_name" : "OpenShift Lightspeed",
    "fix_state" : "Affected",
    "package_name" : "openshift-lightspeed/lightspeed-to-dataverse-exporter-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_lightspeed"
  }, {
    "product_name" : "OpenShift Service Mesh 3",
    "fix_state" : "Not affected",
    "package_name" : "openshift-service-mesh/kiali-rhel9-operator",
    "cpe" : "cpe:/a:redhat:service_mesh:3"
  }, {
    "product_name" : "Red Hat AI Inference Server",
    "fix_state" : "Affected",
    "package_name" : "rhaiis/vllm-tpu-rhel9",
    "cpe" : "cpe:/a:redhat:ai_inference_server:3"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Will not fix",
    "package_name" : "ansible-automation-platform-24/ee-minimal-rhel8",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Will not fix",
    "package_name" : "ansible-automation-platform-24/ee-minimal-rhel9",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Will not fix",
    "package_name" : "ansible-automation-platform-24/ee-supported-rhel9",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Affected",
    "package_name" : "ansible-automation-platform-25/ee-minimal-rhel9",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Will not fix",
    "package_name" : "ansible-automation-platform-25/ee-supported-rhel9",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Will not fix",
    "package_name" : "ansible-automation-platform-25/lightspeed-chatbot-rhel8",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Affected",
    "package_name" : "ansible-automation-platform-26/controller-rhel9",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Not affected",
    "package_name" : "ansible-automation-platform-26/controller-rhel9-operator",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Not affected",
    "package_name" : "ansible-automation-platform-26/eda-controller-rhel9-operator",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Affected",
    "package_name" : "ansible-automation-platform-26/ee-supported-rhel9",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Not affected",
    "package_name" : "ansible-automation-platform-26/gateway-rhel9-operator",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Affected",
    "package_name" : "ansible-automation-platform-26/hub-rhel9",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Not affected",
    "package_name" : "ansible-automation-platform-26/hub-rhel9-operator",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Not affected",
    "package_name" : "ansible-automation-platform-26/lightspeed-rhel9-operator",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Not affected",
    "package_name" : "ansible-automation-platform-26/platform-resource-rhel9-operator",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Affected",
    "package_name" : "rhoai/odh-feature-server-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-kserve-agent-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-kserve-controller-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-kserve-router-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Affected",
    "package_name" : "rhoai/odh-llama-stack-core-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Affected",
    "package_name" : "rhoai/odh-mlflow-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Affected",
    "package_name" : "rhoai/odh-ml-pipelines-runtime-generic-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-modelmesh-runtime-adapter-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Affected",
    "package_name" : "rhoai/odh-training-cuda128-torch29-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-ansible-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-ansible-rhel9-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ztp-site-generate-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenStack Platform 18.0",
    "fix_state" : "Not affected",
    "package_name" : "rhoso-operators/ee-openstack-ansible-ee-rhel9",
    "cpe" : "cpe:/a:redhat:openstack:18.0"
  }, {
    "product_name" : "Red Hat Satellite 6",
    "fix_state" : "Affected",
    "package_name" : "satellite/iop-advisor-engine-rhel9",
    "cpe" : "cpe:/a:redhat:satellite:6"
  }, {
    "product_name" : "Red Hat Satellite 6",
    "fix_state" : "Affected",
    "package_name" : "satellite/iop-insights-engine-rhel9",
    "cpe" : "cpe:/a:redhat:satellite:6"
  }, {
    "product_name" : "Red Hat Trusted Artifact Signer",
    "fix_state" : "Affected",
    "package_name" : "rhtas/segment-reporting-rhel9",
    "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2026-30922\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-30922\nhttps://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0\nhttps://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r" ],
  "name" : "CVE-2026-30922",
  "mitigation" : {
    "value" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
    "lang" : "en:us"
  },
  "csaw" : false
}