{ "threat_severity" : "Moderate", "public_date" : "2026-09-01T21:43:13Z", "bugzilla" : { "description" : "js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing", "id" : "2527118", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2527118" }, "cvss3" : { "cvss3_base_score" : "7.5", "cvss3_scoring_vector" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "status" : "verified" }, "cwe" : "CWE-835", "details" : [ "js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 until 3.15.2 and 4.3.2, maxTotalMergeKeys in lib/js-yaml/loader.js and lib/loader.js does not count empty mapping sources while processing the merge key <<. An attacker can alias a large sequence of empty mappings into many merge targets, causing O(N * K) processing while totalMergeKeys remains unchanged and the configured resource limit is never reached. A relatively small YAML document can therefore cause prolonged CPU consumption in applications that parse untrusted YAML, and merge processing is enabled by default on these release lines. This issue is fixed in versions 3.15.2 and 4.3.2.", "A flaw was found in js-yaml, a JavaScript YAML parser. An attacker can exploit this by providing a specially crafted YAML document that causes the parser to perform excessive processing when handling merge keys with empty sources. This can lead to prolonged CPU consumption, effectively causing a denial of service (DoS) for applications that process untrusted YAML input." ], "statement" : "This is an Important denial of service vulnerability in js-yaml, affecting applications that process untrusted YAML input. The flaw allows an attacker to craft a small YAML document that, when parsed, can lead to prolonged CPU consumption due to inefficient merge key processing, potentially exhausting system resources. This is particularly relevant where applications handle external YAML data and have merge processing enabled by default.", "affected_release" : [ { "product_name" : "Red Hat Ansible Automation Platform 2.6 for RHEL 9", "release_date" : "2026-09-23T00:00:00Z", "advisory" : "RHSA-2026:71113", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.6::el9", "package" : "automation-platform-ui-0:2.6.14-1.el9ap" }, { "product_name" : "Network Observability (NETOBSERV) 1.12.3", "release_date" : "2026-09-23T00:00:00Z", "advisory" : "RHSA-2026:70593", "cpe" : "cpe:/a:redhat:network_observ_optr:1.12::el9", "package" : "network-observability/network-observability-console-plugin-pf5-rhel9:1789978780" }, { "product_name" : "Network Observability (NETOBSERV) 1.12.3", "release_date" : "2026-09-23T00:00:00Z", "advisory" : "RHSA-2026:70593", "cpe" : "cpe:/a:redhat:network_observ_optr:1.12::el9", "package" : "network-observability/network-observability-console-plugin-rhel9:1789978277" }, { "product_name" : "Red Hat Advanced Cluster Security for Kubernetes 4.10", "release_date" : "2026-09-15T00:00:00Z", "advisory" : "RHSA-2026:67711", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.10::el8", "package" : "advanced-cluster-security/rhacs-main-rhel8:1789411269" }, { "product_name" : "Red Hat Advanced Cluster Security for Kubernetes 4.11", "release_date" : "2026-09-15T00:00:00Z", "advisory" : "RHSA-2026:67714", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.11::el9", "package" : "advanced-cluster-security/rhacs-main-rhel9:1789411320" }, { "product_name" : "Red Hat Ansible Automation Platform 2.1", "release_date" : "2026-09-28T00:00:00Z", "advisory" : "RHSA-2026:72712", "cpe" : "cpe:/a:redhat:ansible_portal:2.1", "package" : "ansible-automation-platform/automation-portal:1790254963" }, { "product_name" : "Red Hat Ansible Automation Platform 2.2", "release_date" : "2026-09-28T00:00:00Z", "advisory" : "RHSA-2026:72722", "cpe" : "cpe:/a:redhat:ansible_portal:2.2", "package" : "ansible-automation-platform/automation-portal:1790256405" }, { "product_name" : "Red Hat Ansible Automation Platform 2.5", "release_date" : "2026-09-23T00:00:00Z", "advisory" : "RHSA-2026:71210", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.5::el8", "package" : "ansible-automation-platform-25/lightspeed-rhel8:1789685837" }, { "product_name" : "Red Hat Ansible Automation Platform 2.6", "release_date" : "2026-09-23T00:00:00Z", "advisory" : "RHSA-2026:71179", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.6::el9", "package" : "ansible-automation-platform-26/lightspeed-rhel9:1789656884" }, { "product_name" : "Red Hat Ansible Automation Platform 2.6", "release_date" : "2026-09-23T00:00:00Z", "advisory" : "RHSA-2026:71179", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.6::el9", "package" : "ansible-automation-platform-tech-preview/mcp-server-rhel9:1789669036" }, { "product_name" : "Red Hat Ansible Automation Platform 2.7", "release_date" : "2026-09-14T00:00:00Z", "advisory" : "RHSA-2026:67279", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.7::el9", "package" : "ansible-automation-platform-27/mcp-server-rhel9:1788915736" }, { "product_name" : "Red Hat Container Native Virtualization 4.12", "release_date" : "2026-09-22T00:00:00Z", "advisory" : "RHSA-2026:70047", "cpe" : "cpe:/a:redhat:container_native_virtualization:4.12::el8", "package" : "container-native-virtualization/kubevirt-console-plugin:1789624656" }, { "product_name" : "Red Hat Container Native Virtualization 4.14", "release_date" : "2026-09-22T00:00:00Z", "advisory" : "RHSA-2026:69998", "cpe" : "cpe:/a:redhat:container_native_virtualization:4.14::el9", "package" : "container-native-virtualization/kubevirt-console-plugin-rhel9:1789701168" }, { "product_name" : "Red Hat Container Native Virtualization 4.16", "release_date" : "2026-09-22T00:00:00Z", "advisory" : "RHSA-2026:70027", "cpe" : "cpe:/a:redhat:container_native_virtualization:4.16::el9", "package" : "container-native-virtualization/kubevirt-console-plugin-rhel9:1789703476" }, { "product_name" : "Red Hat Discovery 2", "release_date" : "2026-09-21T00:00:00Z", "advisory" : "RHSA-2026:69289", "cpe" : "cpe:/a:redhat:discovery:2::el9", "package" : "discovery/discovery-ui-rhel9:1789677459" }, { "product_name" : "Red Hat Edge Manager 1.1", "release_date" : "2026-09-16T00:00:00Z", "advisory" : "RHSA-2026:68044", "cpe" : "cpe:/a:redhat:edge_manager:1.1::el10", "package" : "rhem/flightctl-ui-ocp-rhel10:1789486226" }, { "product_name" : "Red Hat Edge Manager 1.1", "release_date" : "2026-09-16T00:00:00Z", "advisory" : "RHSA-2026:68044", "cpe" : "cpe:/a:redhat:edge_manager:1.1::el10", "package" : "rhem/flightctl-ui-rhel10:1789486181" }, { "product_name" : "Red Hat Edge Manager 1.1", "release_date" : "2026-09-16T00:00:00Z", "advisory" : "RHSA-2026:68253", "cpe" : "cpe:/a:redhat:edge_manager:1.1::el9", "package" : "rhem/flightctl-ui-ocp-rhel9:1789486446" }, { "product_name" : "Red Hat Edge Manager 1.2", "release_date" : "2026-09-16T00:00:00Z", "advisory" : "RHSA-2026:68006", "cpe" : "cpe:/a:redhat:edge_manager:1.2::el10", "package" : "rhem/flightctl-ui-ocp-rhel10:1789485920" }, { "product_name" : "Red Hat Edge Manager 1.2", "release_date" : "2026-09-16T00:00:00Z", "advisory" : "RHSA-2026:68006", "cpe" : "cpe:/a:redhat:edge_manager:1.2::el10", "package" : "rhem/flightctl-ui-rhel10:1789488111" }, { "product_name" : "Red Hat Edge Manager 1.2", "release_date" : "2026-09-16T00:00:00Z", "advisory" : "RHSA-2026:68254", "cpe" : "cpe:/a:redhat:edge_manager:1.2::el9", "package" : "rhem/flightctl-ui-ocp-rhel9:1789486476" }, { "product_name" : "Red Hat Edge Manager 1.2", "release_date" : "2026-09-16T00:00:00Z", "advisory" : "RHSA-2026:68254", "cpe" : "cpe:/a:redhat:edge_manager:1.2::el9", "package" : "rhem/flightctl-ui-rhel9:1789486750" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62810", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "grafana12-4-main-12.4.9-0.5.hum1" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62813", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "grafana13-2-main-13.2.0-0.1.4.hum1" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-09-03T00:00:00Z", "advisory" : "RHSA-2026:63164", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "grafana13-2-main-13.2.1-0.1.hum1" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-09-03T00:00:00Z", "advisory" : "RHSA-2026:63165", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "grafana13-1-main-13.1.3-0.5.hum1" }, { "product_name" : "Red Hat Migration Toolkit 1.8", "release_date" : "2026-09-17T00:00:00Z", "advisory" : "RHSA-2026:68681", "cpe" : "cpe:/a:redhat:rhmt:1.8::el8", "package" : "rhmtc/openshift-migration-ui-rhel8:1789546373" }, { "product_name" : "Red Hat Migration Toolkit for Applications 8.2", "release_date" : "2026-09-16T00:00:00Z", "advisory" : "RHSA-2026:67724", "cpe" : "cpe:/a:redhat:migration_toolkit_applications:8.2::el9", "package" : "mta/mta-ui-rhel9:1789446780" }, { "product_name" : "Red Hat OpenShift Dev Spaces 3.30", "release_date" : "2026-09-17T00:00:00Z", "advisory" : "RHSA-2026:68754", "cpe" : "cpe:/a:redhat:openshift_devspaces:3.30::el9", "package" : "devspaces/openvsx-rhel9:1789144269" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.0", "release_date" : "2026-09-17T00:00:00Z", "advisory" : "RHSA-2026:68687", "cpe" : "cpe:/a:redhat:service_mesh:3.0::el9", "package" : "openshift-service-mesh/kiali-ossmc-rhel9:1789023352" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.0", "release_date" : "2026-09-17T00:00:00Z", "advisory" : "RHSA-2026:68687", "cpe" : "cpe:/a:redhat:service_mesh:3.0::el9", "package" : "openshift-service-mesh/kiali-rhel9:1789024827" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.1", "release_date" : "2026-09-17T00:00:00Z", "advisory" : "RHSA-2026:68689", "cpe" : "cpe:/a:redhat:service_mesh:3.1::el9", "package" : "openshift-service-mesh/kiali-ossmc-rhel9:1789023231" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.1", "release_date" : "2026-09-17T00:00:00Z", "advisory" : "RHSA-2026:68689", "cpe" : "cpe:/a:redhat:service_mesh:3.1::el9", "package" : "openshift-service-mesh/kiali-rhel9:1789084585" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.2", "release_date" : "2026-09-17T00:00:00Z", "advisory" : "RHSA-2026:68691", "cpe" : "cpe:/a:redhat:service_mesh:3.2::el9", "package" : "openshift-service-mesh/kiali-ossmc-rhel9:1789021821" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.2", "release_date" : "2026-09-17T00:00:00Z", "advisory" : "RHSA-2026:68691", "cpe" : "cpe:/a:redhat:service_mesh:3.2::el9", "package" : "openshift-service-mesh/kiali-rhel9:1789022173" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.3", "release_date" : "2026-09-17T00:00:00Z", "advisory" : "RHSA-2026:68690", "cpe" : "cpe:/a:redhat:service_mesh:3.3::el9", "package" : "openshift-service-mesh/kiali-ossmc-rhel9:1789050085" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.3", "release_date" : "2026-09-17T00:00:00Z", "advisory" : "RHSA-2026:68690", "cpe" : "cpe:/a:redhat:service_mesh:3.3::el9", "package" : "openshift-service-mesh/kiali-rhel9:1789027395" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.4", "release_date" : "2026-09-17T00:00:00Z", "advisory" : "RHSA-2026:68695", "cpe" : "cpe:/a:redhat:service_mesh:3.4::el9", "package" : "openshift-service-mesh/kiali-ossmc-rhel9:1789475294" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.4", "release_date" : "2026-09-17T00:00:00Z", "advisory" : "RHSA-2026:68695", "cpe" : "cpe:/a:redhat:service_mesh:3.4::el9", "package" : "openshift-service-mesh/kiali-rhel9:1789021319" }, { "product_name" : "Red Hat Quay 3.10", "release_date" : "2026-09-09T00:00:00Z", "advisory" : "RHSA-2026:66084", "cpe" : "cpe:/a:redhat:quay:3.10::el8", "package" : "quay/quay-rhel8:1788561841" }, { "product_name" : "Red Hat Quay 3.14", "release_date" : "2026-09-22T00:00:00Z", "advisory" : "RHSA-2026:70267", "cpe" : "cpe:/a:redhat:quay:3.14::el8", "package" : "quay/quay-rhel8:1788593843" }, { "product_name" : "Red Hat Quay 3.16", "release_date" : "2026-09-21T00:00:00Z", "advisory" : "RHSA-2026:69255", "cpe" : "cpe:/a:redhat:quay:3.16::el9", "package" : "quay/quay-rhel9:1789563753" }, { "product_name" : "Red Hat Satellite 6.18", "release_date" : "2026-09-17T00:00:00Z", "advisory" : "RHSA-2026:68762", "cpe" : "cpe:/a:redhat:satellite:6.18::el9", "package" : "satellite/iop-advisor-frontend-rhel9:1789659573" }, { "product_name" : "Red Hat Satellite 6.18", "release_date" : "2026-09-17T00:00:00Z", "advisory" : "RHSA-2026:68766", "cpe" : "cpe:/a:redhat:satellite:6.18::el9", "package" : "satellite/iop-remediations-rhel9:1789615095" }, { "product_name" : "Red Hat Satellite 6.19", "release_date" : "2026-09-17T00:00:00Z", "advisory" : "RHSA-2026:68747", "cpe" : "cpe:/a:redhat:satellite:6.19::el9", "package" : "satellite/iop-remediations-rhel9:1789615593" }, { "product_name" : "Red Hat Satellite 6.19", "release_date" : "2026-09-17T00:00:00Z", "advisory" : "RHSA-2026:68748", "cpe" : "cpe:/a:redhat:satellite:6.19::el9", "package" : "satellite/iop-advisor-frontend-rhel9:1789659565" } ], "package_state" : [ { "product_name" : "Ansible Automation Orchestrator 2026", "fix_state" : "Affected", "package_name" : "ansible-automation-platform/automation-orchestrator-ui-rhel9", "cpe" : "cpe:/a:redhat:ansible_automation_orchestrator:2026.8" }, { "product_name" : "Cryostat 4", "fix_state" : "Not affected", "package_name" : "cryostat/cryostat-openshift-console-plugin-rhel9", "cpe" : "cpe:/a:redhat:cryostat:4" }, { "product_name" : "Gatekeeper 3", "fix_state" : "Not affected", "package_name" : "gatekeeper/gatekeeper-rhel9", "cpe" : "cpe:/a:redhat:gatekeeper:3" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/console-mce-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Node HealthCheck Operator", "fix_state" : "Affected", "package_name" : "workload-availability/node-healthcheck-must-gather-rhel9", "cpe" : "cpe:/a:redhat:workload_availability_nhc:0" }, { "product_name" : "Node HealthCheck Operator", "fix_state" : "Affected", "package_name" : "workload-availability/node-healthcheck-operator-bundle", "cpe" : "cpe:/a:redhat:workload_availability_nhc:0" }, { "product_name" : "Node HealthCheck Operator", "fix_state" : "Affected", "package_name" : "workload-availability/node-healthcheck-rhel9-operator", "cpe" : "cpe:/a:redhat:workload_availability_nhc:0" }, { "product_name" : "Node HealthCheck Operator", "fix_state" : "Affected", "package_name" : "workload-availability/node-remediation-console-rhel8", "cpe" : "cpe:/a:redhat:workload_availability_nhc:0" }, { "product_name" : "Node HealthCheck Operator", "fix_state" : "Affected", "package_name" : "workload-availability/node-remediation-console-rhel9", "cpe" : "cpe:/a:redhat:workload_availability_nhc:0" }, { "product_name" : "OpenShift Lightspeed", "fix_state" : "Affected", "package_name" : "openshift-lightspeed/lightspeed-agentic-console-rhel9", "cpe" : "cpe:/a:redhat:openshift_lightspeed" }, { "product_name" : "OpenShift Lightspeed", "fix_state" : "Affected", "package_name" : "openshift-lightspeed/lightspeed-console-plugin-419-rhel9", "cpe" : "cpe:/a:redhat:openshift_lightspeed" }, { "product_name" : "OpenShift Lightspeed", "fix_state" : "Affected", "package_name" : "openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9", "cpe" : "cpe:/a:redhat:openshift_lightspeed" }, { "product_name" : "OpenShift Lightspeed", "fix_state" : "Affected", "package_name" : "openshift-lightspeed/lightspeed-console-plugin-rhel9", "cpe" : "cpe:/a:redhat:openshift_lightspeed" }, { "product_name" : "OpenShift Pipelines", "fix_state" : "Affected", "package_name" : "openshift-pipelines/pipelines-console-plugin-pf5-rhel9", "cpe" : "cpe:/a:redhat:openshift_pipelines:1" }, { "product_name" : "OpenShift Pipelines", "fix_state" : "Affected", "package_name" : "openshift-pipelines/pipelines-console-plugin-rhel9", "cpe" : "cpe:/a:redhat:openshift_pipelines:1" }, { "product_name" : "OpenShift Pipelines", "fix_state" : "Affected", "package_name" : "openshift-pipelines/pipelines-hub-ui-rhel8", "cpe" : "cpe:/a:redhat:openshift_pipelines:1" }, { "product_name" : "OpenShift Pipelines", "fix_state" : "Affected", "package_name" : "openshift-pipelines/pipelines-hub-ui-rhel9", "cpe" : "cpe:/a:redhat:openshift_pipelines:1" }, { "product_name" : "OpenShift Service Mesh 3", "fix_state" : "Not affected", "package_name" : "openshift-service-mesh/kiali-operator-bundle", "cpe" : "cpe:/a:redhat:service_mesh:3" }, { "product_name" : "OpenShift Service Mesh 3", "fix_state" : "Not affected", "package_name" : "openshift-service-mesh/kiali-rhel9-operator", "cpe" : "cpe:/a:redhat:service_mesh:3" }, { "product_name" : "Red Hat 3scale API Management Platform 2", "fix_state" : "Not affected", "package_name" : "3scale-amp2/system-rhel8", "cpe" : "cpe:/a:redhat:red_hat_3scale_amp:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/console-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat AMQ Broker 7", "fix_state" : "Not affected", "package_name" : "amq-broker-bin.zip", "cpe" : "cpe:/a:redhat:amq_broker:7" }, { "product_name" : "Red Hat AMQ Broker 7", "fix_state" : "Not affected", "package_name" : "amq-broker-maven-repository.zip", "cpe" : "cpe:/a:redhat:amq_broker:7" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "ansible-automation-platform-26/gateway-rhel9", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "ansible-automation-platform-27/gateway-rhel9", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Will not fix", "package_name" : "automation-controller", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "automation-eda-controller", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "automation-gateway", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "python3.11-azure-core", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "python3.11-azure-identity", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "python3.11-azure-keyvault-certificates", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "python3.11-azure-keyvault-keys", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "python3.11-azure-keyvault-secrets", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "python3.11-azure-storage-blob", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "python3.12-azure-core", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "python3.12-azure-identity", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "python3.12-azure-keyvault-certificates", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "python3.12-azure-keyvault-keys", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "python3.12-azure-keyvault-secrets", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "python3.12-azure-storage-blob", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat build of Apache Camel for Spring Boot 4", "fix_state" : "Not affected", "package_name" : "rhaf-camel-for-springboot-maven-repository.zip", "cpe" : "cpe:/a:redhat:camel_spring_boot:4" }, { "product_name" : "Red Hat build of Apache Camel for Spring Boot 4", "fix_state" : "Not affected", "package_name" : "rhaf-camel-maven-repository.zip", "cpe" : "cpe:/a:redhat:camel_spring_boot:4" }, { "product_name" : "Red Hat build of Apache Camel for Spring Boot 4", "fix_state" : "Not affected", "package_name" : "rhaf-camel-spring-boot-maven-repository.zip", "cpe" : "cpe:/a:redhat:camel_spring_boot:4" }, { "product_name" : "Red Hat build of Apicurio Registry 3", "fix_state" : "Affected", "package_name" : "apicurio/apicurio-registry-gitops-sync-rhel9", "cpe" : "cpe:/a:redhat:apicurio_registry:3" }, { "product_name" : "Red Hat build of Apicurio Registry 3", "fix_state" : "Affected", "package_name" : "apicurio/apicurio-registry-ui-rhel8", "cpe" : "cpe:/a:redhat:apicurio_registry:3" }, { "product_name" : "Red Hat Build of Keycloak", "fix_state" : "Not affected", "package_name" : "keycloak-operator.redhat-00001.zip", "cpe" : "cpe:/a:redhat:build_keycloak:" }, { "product_name" : "Red Hat Build of Keycloak", "fix_state" : "Not affected", "package_name" : "rhbk-quarkus-dist.zip", "cpe" : "cpe:/a:redhat:build_keycloak:" }, { "product_name" : "Red Hat Build of Podman Desktop", "fix_state" : "Affected", "package_name" : "rh-podman-desktop", "cpe" : "cpe:/a:redhat:podman_desktop:1" }, { "product_name" : "Red Hat Build of Podman Desktop", "fix_state" : "Affected", "package_name" : "rh-podman-desktop.git", "cpe" : "cpe:/a:redhat:podman_desktop:1" }, { "product_name" : "Red Hat Ceph Storage 4", "fix_state" : "Affected", "package_name" : "cockpit-ceph-installer", "cpe" : "cpe:/a:redhat:ceph_storage:4" }, { "product_name" : "Red Hat Ceph Storage 4", "fix_state" : "Affected", "package_name" : "rhceph/rhceph-4-dashboard-rhel8", "cpe" : "cpe:/a:redhat:ceph_storage:4" }, { "product_name" : "Red Hat Ceph Storage 6", "fix_state" : "Affected", "package_name" : "ceph", "cpe" : "cpe:/a:redhat:ceph_storage:6" }, { "product_name" : "Red Hat Ceph Storage 7", "fix_state" : "Affected", "package_name" : "ceph", "cpe" : "cpe:/a:redhat:ceph_storage:7" }, { "product_name" : "Red Hat Ceph Storage 8", "fix_state" : "Affected", "package_name" : "ceph", "cpe" : "cpe:/a:redhat:ceph_storage:8" }, { "product_name" : "Red Hat Ceph Storage 9", "fix_state" : "Affected", "package_name" : "ceph", "cpe" : "cpe:/a:redhat:ceph_storage:9" }, { "product_name" : "Red Hat Ceph Storage 9", "fix_state" : "Affected", "package_name" : "libarrow", "cpe" : "cpe:/a:redhat:ceph_storage:9" }, { "product_name" : "Red Hat Ceph Storage 9", "fix_state" : "Affected", "package_name" : "rhceph/alloy-rhel10", "cpe" : "cpe:/a:redhat:ceph_storage:9" }, { "product_name" : "Red Hat Certification Program for Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "redhat-certification-cnf", "cpe" : "cpe:/a:redhat:certifications:9" }, { "product_name" : "Red Hat Connectivity Link 1", "fix_state" : "Affected", "package_name" : "rhcl-1/rhcl-console-plugin-rhel9", "cpe" : "cpe:/a:redhat:connectivity_link:1" }, { "product_name" : "Red Hat Data Grid 8", "fix_state" : "Not affected", "package_name" : "redhat-datagrid-maven-repository.zip", "cpe" : "cpe:/a:redhat:jboss_data_grid:8" }, { "product_name" : "Red Hat Developer Hub", "fix_state" : "Affected", "package_name" : "rhdh/red-hat-developer-hub-backstage-plugin-lightspeed", "cpe" : "cpe:/a:redhat:rhdh:1" }, { "product_name" : "Red Hat Developer Hub", "fix_state" : "Affected", "package_name" : "rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend", "cpe" : "cpe:/a:redhat:rhdh:1" }, { "product_name" : "Red Hat Developer Hub", "fix_state" : "Affected", "package_name" : "rhdh/red-hat-developer-hub-backstage-plugin-orchestrator", "cpe" : "cpe:/a:redhat:rhdh:1" }, { "product_name" : "Red Hat Developer Hub", "fix_state" : "Affected", "package_name" : "rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend", "cpe" : "cpe:/a:redhat:rhdh:1" }, { "product_name" : "Red Hat Developer Hub", "fix_state" : "Affected", "package_name" : "rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki", "cpe" : "cpe:/a:redhat:rhdh:1" }, { "product_name" : "Red Hat Developer Hub", "fix_state" : "Affected", "package_name" : "rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets", "cpe" : "cpe:/a:redhat:rhdh:1" }, { "product_name" : "Red Hat Developer Hub", "fix_state" : "Affected", "package_name" : "rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator", "cpe" : "cpe:/a:redhat:rhdh:1" }, { "product_name" : "Red Hat Developer Hub", "fix_state" : "Affected", "package_name" : "rhdh/rhdh-hub-rhel9", "cpe" : "cpe:/a:redhat:rhdh:1" }, { "product_name" : "Red Hat Directory Server 11", "fix_state" : "Will not fix", "package_name" : "redhat-ds:11/389-ds-base", "cpe" : "cpe:/a:redhat:directory_server:11" }, { "product_name" : "Red Hat Directory Server 12", "fix_state" : "Will not fix", "package_name" : "redhat-ds:12/389-ds-base", "cpe" : "cpe:/a:redhat:directory_server:12" }, { "product_name" : "Red Hat Directory Server 13", "fix_state" : "Will not fix", "package_name" : "389-ds-base", "cpe" : "cpe:/a:redhat:directory_server:13" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "ceph", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Not affected", "package_name" : "dotnet8.0", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "firefox", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Not affected", "package_name" : "gnome-shell-extension-dash-to-panel", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "grafana", "cpe" : "cpe:/o:redhat:enterprise_linux:10", "impact" : "moderate" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "grafana-pcp", "cpe" : "cpe:/o:redhat:enterprise_linux:10", "impact" : "moderate" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "nodejs22", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "nodejs24", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Will not fix", "package_name" : "nodejs26", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Not affected", "package_name" : "pcs", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "rh-podman-desktop", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Not affected", "package_name" : "rust", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "thunderbird", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 7", "fix_state" : "Affected", "package_name" : "subscription-manager", "cpe" : "cpe:/o:redhat:enterprise_linux:7" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Will not fix", "package_name" : "389-ds:1.4/389-ds-base", "cpe" : "cpe:/o:redhat:enterprise_linux:8" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Not affected", "package_name" : "dotnet8.0", "cpe" : "cpe:/o:redhat:enterprise_linux:8" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Affected", "package_name" : "grafana", "cpe" : "cpe:/o:redhat:enterprise_linux:8", "impact" : "moderate" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Affected", "package_name" : "grafana-pcp", "cpe" : "cpe:/o:redhat:enterprise_linux:8", "impact" : "moderate" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Affected", "package_name" : "mozjs60", "cpe" : "cpe:/o:redhat:enterprise_linux:8" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Not affected", "package_name" : "pcs", "cpe" : "cpe:/o:redhat:enterprise_linux:8" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Not affected", "package_name" : "rust-toolset:rhel8/rust", "cpe" : "cpe:/o:redhat:enterprise_linux:8" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Affected", "package_name" : "thunderbird", "cpe" : "cpe:/o:redhat:enterprise_linux:8" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Will not fix", "package_name" : "389-ds-base", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Not affected", "package_name" : "dotnet6.0", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Not affected", "package_name" : "dotnet7.0", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Not affected", "package_name" : "dotnet8.0", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "firefox", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "gjs", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "grafana", "cpe" : "cpe:/o:redhat:enterprise_linux:9", "impact" : "moderate" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "grafana-pcp", "cpe" : "cpe:/o:redhat:enterprise_linux:9", "impact" : "moderate" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Will not fix", "package_name" : "nodejs:22/nodejs", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Not affected", "package_name" : "pcs", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Not affected", "package_name" : "rust", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "thunderbird", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux AI (RHEL AI) 3", "fix_state" : "Affected", "package_name" : "rhelai3/bootc-cuda-rhel9", "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3" }, { "product_name" : "Red Hat Enterprise Linux AI (RHEL AI) 3", "fix_state" : "Affected", "package_name" : "rhelai3/bootc-gaudi-rhel9", "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3" }, { "product_name" : "Red Hat Enterprise Linux AI (RHEL AI) 3", "fix_state" : "Affected", "package_name" : "rhelai3/bootc-rocm-rhel9", "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3" }, { "product_name" : "Red Hat Enterprise Linux AI (RHEL AI) 3", "fix_state" : "Affected", "package_name" : "rhelai3/disk-image-cuda-rhel9", "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3" }, { "product_name" : "Red Hat Enterprise Linux AI (RHEL AI) 3", "fix_state" : "Affected", "package_name" : "rust", "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3" }, { "product_name" : "Red Hat Fuse 7", "fix_state" : "Will not fix", "package_name" : "js-yaml", "cpe" : "cpe:/a:redhat:jboss_fuse:7" }, { "product_name" : "Red Hat Hardened Images", "fix_state" : "Not affected", "package_name" : "dotnet8.0", "cpe" : "cpe:/a:redhat:hummingbird:1" }, { "product_name" : "Red Hat Hardened Images", "fix_state" : "Not affected", "package_name" : "jaeger", "cpe" : "cpe:/a:redhat:hummingbird:1" }, { "product_name" : "Red Hat Hardened Images", "fix_state" : "Will not fix", "package_name" : "nodejs20", "cpe" : "cpe:/a:redhat:hummingbird:1" }, { "product_name" : "Red Hat Hardened Images", "fix_state" : "Not affected", "package_name" : "nodejs22", "cpe" : "cpe:/a:redhat:hummingbird:1" }, { "product_name" : "Red Hat Hardened Images", "fix_state" : "Not affected", "package_name" : "nodejs24", "cpe" : "cpe:/a:redhat:hummingbird:1" }, { "product_name" : "Red Hat Hardened Images", "fix_state" : "Will not fix", "package_name" : "nodejs25", "cpe" : "cpe:/a:redhat:hummingbird:1" }, { "product_name" : "Red Hat Hardened Images", "fix_state" : "Not affected", "package_name" : "nodejs26", "cpe" : "cpe:/a:redhat:hummingbird:1" }, { "product_name" : "Red Hat Hardened Images", "fix_state" : "Not affected", "package_name" : "opentelemetry-collector", "cpe" : "cpe:/a:redhat:hummingbird:1" }, { "product_name" : "Red Hat Hardened Images", "fix_state" : "Not affected", "package_name" : "opentelemetry-collector-contrib", "cpe" : "cpe:/a:redhat:hummingbird:1" }, { "product_name" : "Red Hat Hardened Images", "fix_state" : "Not affected", "package_name" : "opentelemetry-collector-k8s", "cpe" : "cpe:/a:redhat:hummingbird:1" }, { "product_name" : "Red Hat Hardened Images", "fix_state" : "Not affected", "package_name" : "prometheus3.13", "cpe" : "cpe:/a:redhat:hummingbird:1" }, { "product_name" : "Red Hat Hardened Images", "fix_state" : "Not affected", "package_name" : "rust", "cpe" : "cpe:/a:redhat:hummingbird:1" }, { "product_name" : "Red Hat Hardened Images", "fix_state" : "Not affected", "package_name" : "yarnpkg", "cpe" : "cpe:/a:redhat:hummingbird:1" }, { "product_name" : "Red Hat JBoss Enterprise Application Platform 7", "fix_state" : "Not affected", "package_name" : "jboss-eap-full-maven-repository.zip", "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:7" }, { "product_name" : "Red Hat JBoss Enterprise Application Platform 7", "fix_state" : "Not affected", "package_name" : "jboss-eap-incremental-maven-repository.zip", "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:7" }, { "product_name" : "Red Hat JBoss Enterprise Application Platform 7", "fix_state" : "Not affected", "package_name" : "jboss-eap-maven-repository.zip", "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:7" }, { "product_name" : "Red Hat JBoss Enterprise Application Platform 7", "fix_state" : "Not affected", "package_name" : "jboss-eap-patch.zip", "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:7" }, { "product_name" : "Red Hat JBoss Enterprise Application Platform 7", "fix_state" : "Not affected", "package_name" : "jboss-eap-runtime-maven-repository.zip", "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:7" }, { "product_name" : "Red Hat JBoss Enterprise Application Platform 8", "fix_state" : "Affected", "package_name" : "jboss-eap.1-runtime-maven-repository.zip", "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:8" }, { "product_name" : "Red Hat JBoss Enterprise Application Platform 8", "fix_state" : "Affected", "package_name" : "jboss-eap-runtime-maven-repository.zip", "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:8" }, { "product_name" : "Red Hat JBoss Enterprise Application Platform Expansion Pack", "fix_state" : "Not affected", "package_name" : "jboss-eap.1-runtime-maven-repository.zip", "cpe" : "cpe:/a:redhat:jbosseapxp" }, { "product_name" : "Red Hat JBoss Enterprise Application Platform Expansion Pack", "fix_state" : "Not affected", "package_name" : "jboss-eap-runtime-maven-repository.zip", "cpe" : "cpe:/a:redhat:jbosseapxp" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-core-bff-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-dashboard-operator-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-dashboard-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-feature-server-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-mlflow-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-mod-arch-agent-ops-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-mod-arch-automl-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-mod-arch-autorag-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-mod-arch-eval-hub-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-mod-arch-gen-ai-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-mod-arch-maas-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-mod-arch-mlflow-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-mod-arch-model-registry-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/nmstate-console-plugin-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-agent-installer-ui-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-console", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-console-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-monitoring-plugin-rhel8", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-monitoring-plugin-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat Openshift Data Foundation 4", "fix_state" : "Affected", "package_name" : "odf4/ocs-client-console-rhel9", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4" }, { "product_name" : "Red Hat Openshift Data Foundation 4", "fix_state" : "Affected", "package_name" : "odf4/odf-console-rhel9", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4" }, { "product_name" : "Red Hat Openshift Data Foundation 4", "fix_state" : "Affected", "package_name" : "odf4/odf-multicluster-console-rhel9", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4" }, { "product_name" : "Red Hat OpenShift Dev Spaces", "fix_state" : "Affected", "package_name" : "devspaces/code-rhel9", "cpe" : "cpe:/a:redhat:openshift_devspaces:3" }, { "product_name" : "Red Hat OpenShift Dev Spaces", "fix_state" : "Affected", "package_name" : "devspaces/dashboard-rhel9", "cpe" : "cpe:/a:redhat:openshift_devspaces:3" }, { "product_name" : "Red Hat OpenShift GitOps", "fix_state" : "Affected", "package_name" : "microshift-gitops", "cpe" : "cpe:/a:redhat:openshift_gitops:1" }, { "product_name" : "Red Hat OpenShift GitOps", "fix_state" : "Affected", "package_name" : "openshift-gitops-1/argocd-rhel8", "cpe" : "cpe:/a:redhat:openshift_gitops:1" }, { "product_name" : "Red Hat OpenShift GitOps", "fix_state" : "Affected", "package_name" : "openshift-gitops-1/argocd-rhel9", "cpe" : "cpe:/a:redhat:openshift_gitops:1" }, { "product_name" : "Red Hat OpenShift GitOps", "fix_state" : "Affected", "package_name" : "openshift-gitops-argocd-cli", "cpe" : "cpe:/a:redhat:openshift_gitops:1" }, { "product_name" : "Red Hat Single Sign-On 7", "fix_state" : "Affected", "package_name" : "js-yaml", "cpe" : "cpe:/a:redhat:red_hat_single_sign_on:7" }, { "product_name" : "Red Hat Trusted Artifact Signer", "fix_state" : "Affected", "package_name" : "rhtas/rekor-search-ui-rhel9", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1" }, { "product_name" : "Red Hat Trusted Artifact Signer", "fix_state" : "Affected", "package_name" : "rhtas/rhtas-console-ui-rhel9", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1" }, { "product_name" : "Secrets Management Console for Red Hat OpenShift", "fix_state" : "Will not fix", "package_name" : "external-secrets-management/console-plugin-rhel9", "cpe" : "cpe:/a:redhat:secrets_management_console:0" }, { "product_name" : "Self-service automation portal 2", "fix_state" : "Affected", "package_name" : "ansible-automation-platform/bootc-automation-portal-rhel9", "cpe" : "cpe:/a:redhat:ansible_portal:2" } ], "references" : [ "https://www.cve.org/CVERecord?id=CVE-2026-84375\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-84375\nhttps://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639\nhttps://github.com/nodeca/js-yaml/commit/6a8e05f9a485188ed730ac81e81ae221352ef480\nhttps://github.com/nodeca/js-yaml/commit/d90b6612a5a84385bdcb556c44578eac76dc0f6b\nhttps://github.com/nodeca/js-yaml/pull/797\nhttps://github.com/nodeca/js-yaml/releases/tag/3.15.2\nhttps://github.com/nodeca/js-yaml/releases/tag/4.3.2\nhttps://github.com/nodeca/js-yaml/security/advisories/GHSA-2883-xcg3-v3hh" ], "name" : "CVE-2026-84375", "csaw" : false }