{
  "threat_severity" : "Important",
  "public_date" : "2025-01-06T16:20:16Z",
  "bugzilla" : {
    "description" : "go-git: go-git clients vulnerable to DoS via maliciously crafted Git server replies",
    "id" : "2335901",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2335901"
  },
  "cvss3" : {
    "cvss3_base_score" : "7.5",
    "cvss3_scoring_vector" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
    "status" : "verified"
  },
  "cwe" : "CWE-770",
  "details" : [ "go-git is a highly extensible git implementation library written in pure Go. A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.13. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients. Users running versions of go-git from v4 and above are recommended to upgrade to v5.13 in order to mitigate this vulnerability.", "A denial of service (DoS) vulnerability was found in go-git. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server, which triggers resource exhaustion in go-git clients." ],
  "affected_release" : [ {
    "product_name" : "Red Hat Advanced Cluster Security 4.4",
    "release_date" : "2025-02-13T00:00:00Z",
    "advisory" : "RHSA-2025:1468",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.4::el8",
    "package" : "advanced-cluster-security/rhacs-main-rhel8:4.4.8-2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4.4",
    "release_date" : "2025-02-13T00:00:00Z",
    "advisory" : "RHSA-2025:1468",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.4::el8",
    "package" : "advanced-cluster-security/rhacs-rhel8-operator:4.4.8-2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4.4",
    "release_date" : "2025-02-13T00:00:00Z",
    "advisory" : "RHSA-2025:1468",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.4::el8",
    "package" : "advanced-cluster-security/rhacs-roxctl-rhel8:4.4.8-2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4.5",
    "release_date" : "2025-02-11T00:00:00Z",
    "advisory" : "RHSA-2025:1334",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.5::el8",
    "package" : "advanced-cluster-security/rhacs-main-rhel8:4.5.6-2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4.5",
    "release_date" : "2025-02-11T00:00:00Z",
    "advisory" : "RHSA-2025:1334",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.5::el8",
    "package" : "advanced-cluster-security/rhacs-rhel8-operator:4.5.6-2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4.5",
    "release_date" : "2025-02-11T00:00:00Z",
    "advisory" : "RHSA-2025:1334",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.5::el8",
    "package" : "advanced-cluster-security/rhacs-roxctl-rhel8:4.5.6-2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4.5",
    "release_date" : "2025-02-11T00:00:00Z",
    "advisory" : "RHSA-2025:1334",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.5::el8",
    "package" : "advanced-cluster-security/rhacs-scanner-rhel8:4.5.6-2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4.5",
    "release_date" : "2025-02-11T00:00:00Z",
    "advisory" : "RHSA-2025:1334",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.5::el8",
    "package" : "advanced-cluster-security/rhacs-scanner-slim-rhel8:4.5.6-2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4.5",
    "release_date" : "2025-02-11T00:00:00Z",
    "advisory" : "RHSA-2025:1334",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.5::el8",
    "package" : "advanced-cluster-security/rhacs-scanner-v4-db-rhel8:4.5.6-1"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4.5",
    "release_date" : "2025-02-11T00:00:00Z",
    "advisory" : "RHSA-2025:1334",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.5::el8",
    "package" : "advanced-cluster-security/rhacs-scanner-v4-rhel8:4.5.6-2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4.6",
    "release_date" : "2025-02-03T00:00:00Z",
    "advisory" : "RHSA-2025:0907",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.6::el8",
    "package" : "advanced-cluster-security/rhacs-central-db-rhel8:4.6.2-2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4.6",
    "release_date" : "2025-02-03T00:00:00Z",
    "advisory" : "RHSA-2025:0907",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.6::el8",
    "package" : "advanced-cluster-security/rhacs-collector-rhel8:4.6.2-2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4.6",
    "release_date" : "2025-02-03T00:00:00Z",
    "advisory" : "RHSA-2025:0907",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.6::el8",
    "package" : "advanced-cluster-security/rhacs-collector-slim-rhel8:4.6.2-2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4.6",
    "release_date" : "2025-02-03T00:00:00Z",
    "advisory" : "RHSA-2025:0907",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.6::el8",
    "package" : "advanced-cluster-security/rhacs-main-rhel8:4.6.2-2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4.6",
    "release_date" : "2025-02-03T00:00:00Z",
    "advisory" : "RHSA-2025:0907",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.6::el8",
    "package" : "advanced-cluster-security/rhacs-operator-bundle:4.6.2-2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4.6",
    "release_date" : "2025-02-03T00:00:00Z",
    "advisory" : "RHSA-2025:0907",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.6::el8",
    "package" : "advanced-cluster-security/rhacs-rhel8-operator:4.6.2-2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4.6",
    "release_date" : "2025-02-03T00:00:00Z",
    "advisory" : "RHSA-2025:0907",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.6::el8",
    "package" : "advanced-cluster-security/rhacs-roxctl-rhel8:4.6.2-2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4.6",
    "release_date" : "2025-02-03T00:00:00Z",
    "advisory" : "RHSA-2025:0907",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.6::el8",
    "package" : "advanced-cluster-security/rhacs-scanner-db-rhel8:4.6.2-2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4.6",
    "release_date" : "2025-02-03T00:00:00Z",
    "advisory" : "RHSA-2025:0907",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.6::el8",
    "package" : "advanced-cluster-security/rhacs-scanner-db-slim-rhel8:4.6.2-2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4.6",
    "release_date" : "2025-02-03T00:00:00Z",
    "advisory" : "RHSA-2025:0907",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.6::el8",
    "package" : "advanced-cluster-security/rhacs-scanner-rhel8:4.6.2-2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4.6",
    "release_date" : "2025-02-03T00:00:00Z",
    "advisory" : "RHSA-2025:0907",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.6::el8",
    "package" : "advanced-cluster-security/rhacs-scanner-slim-rhel8:4.6.2-2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4.6",
    "release_date" : "2025-02-03T00:00:00Z",
    "advisory" : "RHSA-2025:0907",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.6::el8",
    "package" : "advanced-cluster-security/rhacs-scanner-v4-db-rhel8:4.6.2-2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4.6",
    "release_date" : "2025-02-03T00:00:00Z",
    "advisory" : "RHSA-2025:0907",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.6::el8",
    "package" : "advanced-cluster-security/rhacs-scanner-v4-rhel8:4.6.2-2"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "release_date" : "2025-01-20T00:00:00Z",
    "advisory" : "RHSA-2025:0401",
    "cpe" : "cpe:/a:redhat:enterprise_linux:8",
    "package" : "grafana-0:9.2.10-21.el8_10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "release_date" : "2025-01-20T00:00:00Z",
    "advisory" : "RHSA-2025:0401",
    "cpe" : "cpe:/a:redhat:enterprise_linux:8",
    "package" : "rhel8/grafana:0:9.2.10-21.el8_10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9.4 Extended Update Support",
    "release_date" : "2025-01-23T00:00:00Z",
    "advisory" : "RHSA-2025:0662",
    "cpe" : "cpe:/a:redhat:rhel_eus:9.4",
    "package" : "grafana-0:9.2.10-21.el9_4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.16",
    "release_date" : "2025-02-27T00:00:00Z",
    "advisory" : "RHSA-2025:1704",
    "cpe" : "cpe:/a:redhat:openshift:4.16::el9",
    "package" : "openshift4/ose-helm-rhel9-operator:v4.16.0-202502130836.p0.g26e182e.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.16",
    "release_date" : "2025-02-27T00:00:00Z",
    "advisory" : "RHSA-2025:1704",
    "cpe" : "cpe:/a:redhat:openshift:4.16::el9",
    "package" : "openshift4/ose-operator-sdk-rhel9:v4.16.0-202502190034.p0.g26e182e.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.17",
    "release_date" : "2025-01-28T00:00:00Z",
    "advisory" : "RHSA-2025:0654",
    "cpe" : "cpe:/a:redhat:openshift:4.17::el9",
    "package" : "openshift4/oc-mirror-plugin-rhel9:v4.17.0-202501221434.p0.g39bedc7.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.17",
    "release_date" : "2025-02-11T00:00:00Z",
    "advisory" : "RHSA-2025:1119",
    "cpe" : "cpe:/a:redhat:openshift:4.17::el9",
    "package" : "openshift4/ose-helm-rhel9-operator:v4.17.0-202502051104.p0.g61a705e.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.17",
    "release_date" : "2025-02-11T00:00:00Z",
    "advisory" : "RHSA-2025:1119",
    "cpe" : "cpe:/a:redhat:openshift:4.17::el9",
    "package" : "openshift4/ose-operator-sdk-rhel9:v4.17.0-202502051104.p0.g61a705e.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.18",
    "release_date" : "2025-02-25T00:00:00Z",
    "advisory" : "RHSA-2024:6122",
    "cpe" : "cpe:/a:redhat:openshift:4.18::el9",
    "package" : "openshift4/oc-mirror-plugin-rhel9:v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.18",
    "release_date" : "2025-02-25T00:00:00Z",
    "advisory" : "RHSA-2024:6122",
    "cpe" : "cpe:/a:redhat:openshift:4.18::el9",
    "package" : "openshift4/ose-olm-catalogd-rhel9:v4.18.0-202502052031.p0.gf95a88f.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.18",
    "release_date" : "2025-02-25T00:00:00Z",
    "advisory" : "RHSA-2024:6122",
    "cpe" : "cpe:/a:redhat:openshift:4.18::el9",
    "package" : "openshift4/ose-olm-operator-controller-rhel9:v4.18.0-202502051931.p0.g74a2477.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift GitOps 1.14",
    "release_date" : "2025-03-20T00:00:00Z",
    "advisory" : "RHSA-2025:3069",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1.14::el8",
    "package" : "openshift-gitops-1/argocd-rhel8:v1.14.3-4"
  }, {
    "product_name" : "Red Hat OpenShift GitOps 1.14",
    "release_date" : "2025-03-20T00:00:00Z",
    "advisory" : "RHSA-2025:3069",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1.14::el8",
    "package" : "openshift-gitops-1/argocd-rhel9:v1.14.3-1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps 1.14",
    "release_date" : "2025-03-20T00:00:00Z",
    "advisory" : "RHSA-2025:3069",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1.14::el8",
    "package" : "openshift-gitops-1/argo-rollouts-rhel8:v1.14.3-4"
  }, {
    "product_name" : "Red Hat OpenShift GitOps 1.14",
    "release_date" : "2025-03-20T00:00:00Z",
    "advisory" : "RHSA-2025:3069",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1.14::el8",
    "package" : "openshift-gitops-1/console-plugin-rhel8:v1.14.3-4"
  }, {
    "product_name" : "Red Hat OpenShift GitOps 1.14",
    "release_date" : "2025-03-20T00:00:00Z",
    "advisory" : "RHSA-2025:3069",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1.14::el8",
    "package" : "openshift-gitops-1/dex-rhel8:v1.14.3-4"
  }, {
    "product_name" : "Red Hat OpenShift GitOps 1.14",
    "release_date" : "2025-03-20T00:00:00Z",
    "advisory" : "RHSA-2025:3069",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1.14::el8",
    "package" : "openshift-gitops-1/gitops-operator-bundle:v1.14.3-4"
  }, {
    "product_name" : "Red Hat OpenShift GitOps 1.14",
    "release_date" : "2025-03-20T00:00:00Z",
    "advisory" : "RHSA-2025:3069",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1.14::el8",
    "package" : "openshift-gitops-1/gitops-rhel8:v1.14.3-4"
  }, {
    "product_name" : "Red Hat OpenShift GitOps 1.14",
    "release_date" : "2025-03-20T00:00:00Z",
    "advisory" : "RHSA-2025:3069",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1.14::el8",
    "package" : "openshift-gitops-1/gitops-rhel8-operator:v1.14.3-4"
  }, {
    "product_name" : "Red Hat OpenShift GitOps 1.14",
    "release_date" : "2025-03-20T00:00:00Z",
    "advisory" : "RHSA-2025:3069",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1.14::el8",
    "package" : "openshift-gitops-1/kam-delivery-rhel8:v1.14.3-4"
  }, {
    "product_name" : "Red Hat OpenShift GitOps 1.14",
    "release_date" : "2025-03-20T00:00:00Z",
    "advisory" : "RHSA-2025:3069",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1.14::el8",
    "package" : "openshift-gitops-1/must-gather-rhel8:v1.14.3-4"
  }, {
    "product_name" : "Red Hat OpenShift GitOps 1.15",
    "release_date" : "2025-02-26T00:00:00Z",
    "advisory" : "RHSA-2025:1888",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1.15::el8",
    "package" : "openshift-gitops-1/argocd-extensions-rhel8:v1.15.1-7"
  }, {
    "product_name" : "Red Hat OpenShift GitOps 1.15",
    "release_date" : "2025-02-26T00:00:00Z",
    "advisory" : "RHSA-2025:1888",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1.15::el8",
    "package" : "openshift-gitops-1/argocd-rhel8:v1.15.1-7"
  }, {
    "product_name" : "Red Hat OpenShift GitOps 1.15",
    "release_date" : "2025-02-26T00:00:00Z",
    "advisory" : "RHSA-2025:1888",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1.15::el8",
    "package" : "openshift-gitops-1/argocd-rhel9:v1.15.1-1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps 1.15",
    "release_date" : "2025-02-26T00:00:00Z",
    "advisory" : "RHSA-2025:1888",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1.15::el8",
    "package" : "openshift-gitops-1/argo-rollouts-rhel8:v1.15.1-7"
  }, {
    "product_name" : "Red Hat OpenShift GitOps 1.15",
    "release_date" : "2025-02-26T00:00:00Z",
    "advisory" : "RHSA-2025:1888",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1.15::el8",
    "package" : "openshift-gitops-1/console-plugin-rhel8:v1.15.1-7"
  }, {
    "product_name" : "Red Hat OpenShift GitOps 1.15",
    "release_date" : "2025-02-26T00:00:00Z",
    "advisory" : "RHSA-2025:1888",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1.15::el8",
    "package" : "openshift-gitops-1/dex-rhel8:v1.15.1-7"
  }, {
    "product_name" : "Red Hat OpenShift GitOps 1.15",
    "release_date" : "2025-02-26T00:00:00Z",
    "advisory" : "RHSA-2025:1888",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1.15::el8",
    "package" : "openshift-gitops-1/gitops-operator-bundle:v1.15.1-7"
  }, {
    "product_name" : "Red Hat OpenShift GitOps 1.15",
    "release_date" : "2025-02-26T00:00:00Z",
    "advisory" : "RHSA-2025:1888",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1.15::el8",
    "package" : "openshift-gitops-1/gitops-rhel8:v1.15.1-7"
  }, {
    "product_name" : "Red Hat OpenShift GitOps 1.15",
    "release_date" : "2025-02-26T00:00:00Z",
    "advisory" : "RHSA-2025:1888",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1.15::el8",
    "package" : "openshift-gitops-1/gitops-rhel8-operator:v1.15.1-7"
  }, {
    "product_name" : "Red Hat OpenShift GitOps 1.15",
    "release_date" : "2025-02-26T00:00:00Z",
    "advisory" : "RHSA-2025:1888",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1.15::el8",
    "package" : "openshift-gitops-1/must-gather-rhel8:v1.15.1-7"
  }, {
    "product_name" : "Red Hat OpenStack Platform 16.2",
    "release_date" : "2025-02-26T00:00:00Z",
    "advisory" : "RHSA-2025:1869",
    "cpe" : "cpe:/a:redhat:openstack:16.2::el8",
    "package" : "rhosp-rhel8/osp-director-agent:1.3.0-17"
  }, {
    "product_name" : "Red Hat OpenStack Platform 16.2",
    "release_date" : "2025-02-26T00:00:00Z",
    "advisory" : "RHSA-2025:1869",
    "cpe" : "cpe:/a:redhat:openstack:16.2::el8",
    "package" : "rhosp-rhel8/osp-director-downloader:1.3.0-17"
  }, {
    "product_name" : "Red Hat OpenStack Platform 16.2",
    "release_date" : "2025-02-26T00:00:00Z",
    "advisory" : "RHSA-2025:1869",
    "cpe" : "cpe:/a:redhat:openstack:16.2::el8",
    "package" : "rhosp-rhel8/osp-director-operator:1.3.0-15"
  }, {
    "product_name" : "Red Hat OpenStack Platform 16.2",
    "release_date" : "2025-02-26T00:00:00Z",
    "advisory" : "RHSA-2025:1869",
    "cpe" : "cpe:/a:redhat:openstack:16.2::el8",
    "package" : "rhosp-rhel8/osp-director-operator-bundle:1.3.0-33"
  }, {
    "product_name" : "Red Hat OpenStack Platform 17.1 for RHEL 9",
    "release_date" : "2025-02-26T00:00:00Z",
    "advisory" : "RHSA-2025:1870",
    "cpe" : "cpe:/a:redhat:openstack:17.1::el9",
    "package" : "rhosp-rhel9/osp-director-agent:1.3.1-20"
  }, {
    "product_name" : "Red Hat OpenStack Platform 17.1 for RHEL 9",
    "release_date" : "2025-02-26T00:00:00Z",
    "advisory" : "RHSA-2025:1870",
    "cpe" : "cpe:/a:redhat:openstack:17.1::el9",
    "package" : "rhosp-rhel9/osp-director-downloader:1.3.1-18"
  }, {
    "product_name" : "Red Hat OpenStack Platform 17.1 for RHEL 9",
    "release_date" : "2025-02-26T00:00:00Z",
    "advisory" : "RHSA-2025:1870",
    "cpe" : "cpe:/a:redhat:openstack:17.1::el9",
    "package" : "rhosp-rhel9/osp-director-operator:1.3.1-20"
  }, {
    "product_name" : "Red Hat OpenStack Platform 17.1 for RHEL 9",
    "release_date" : "2025-02-26T00:00:00Z",
    "advisory" : "RHSA-2025:1870",
    "cpe" : "cpe:/a:redhat:openstack:17.1::el9",
    "package" : "rhosp-rhel9/osp-director-operator-bundle:1.3.1-41"
  }, {
    "product_name" : "Red Hat Trusted Profile Analyzer 1.2",
    "release_date" : "2025-01-20T00:00:00Z",
    "advisory" : "RHSA-2025:0444",
    "cpe" : "cpe:/a:redhat:trusted_profile_analyzer:1.2::el9",
    "package" : "rhtpa/rhtpa-guac-rhel9:sha256:2dc71ee6e8c55a29b6dd68006c7d0365154d35c850021d8b4b77e24b4e8fd1a6"
  }, {
    "product_name" : "Red Hat Trusted Profile Analyzer 1.2",
    "release_date" : "2025-01-20T00:00:00Z",
    "advisory" : "RHSA-2025:0445",
    "cpe" : "cpe:/a:redhat:trusted_profile_analyzer:1.2::el9",
    "package" : "rhtpa/rhtpa-trustification-service-rhel9:sha256:eb2e0b1003ef77c39b28fe9fbe2ca8141aa72160bdcd7d55eddac2c16629d7c4"
  } ],
  "package_state" : [ {
    "product_name" : "Assisted Installer for Red Hat OpenShift Container Platform 2",
    "fix_state" : "Under investigation",
    "package_name" : "assisted/agent-preinstall-image-builder-rhel9",
    "cpe" : "cpe:/a:redhat:assisted_installer:2"
  }, {
    "product_name" : "Assisted Installer for Red Hat OpenShift Container Platform 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhai/assisted-installer-controller-rhel9",
    "cpe" : "cpe:/a:redhat:assisted_installer:2"
  }, {
    "product_name" : "Builds for Red Hat OpenShift",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-builds/openshift-builds-controller-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_builds:1"
  }, {
    "product_name" : "Builds for Red Hat OpenShift",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-builds/openshift-builds-git-cloner-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_builds:1"
  }, {
    "product_name" : "Builds for Red Hat OpenShift",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-builds/openshift-builds-image-bundler-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_builds:1"
  }, {
    "product_name" : "Builds for Red Hat OpenShift",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-builds/openshift-builds-image-processing-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_builds:1"
  }, {
    "product_name" : "Builds for Red Hat OpenShift",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-builds/openshift-builds-waiters-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_builds:1"
  }, {
    "product_name" : "Builds for Red Hat OpenShift",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-builds/openshift-builds-webhook-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_builds:1"
  }, {
    "product_name" : "Compliance Operator",
    "fix_state" : "Under investigation",
    "package_name" : "compliance/openshift-compliance-must-gather-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_compliance_operator:1"
  }, {
    "product_name" : "Confidential Compute Attestation",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-sandboxed-containers/osc-must-gather-rhel9",
    "cpe" : "cpe:/a:redhat:confidential_compute_attestation:1"
  }, {
    "product_name" : "Custom Metric Autoscaler operator for Red Hat Openshift",
    "fix_state" : "Under investigation",
    "package_name" : "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator",
    "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
  }, {
    "product_name" : "External Secrets Operator for Red Hat OpenShift",
    "fix_state" : "Under investigation",
    "package_name" : "external-secrets-operator/bitwarden-sdk-server-rhel9",
    "cpe" : "cpe:/a:redhat:external_secrets_operator:1"
  }, {
    "product_name" : "External Secrets Operator for Red Hat OpenShift",
    "fix_state" : "Under investigation",
    "package_name" : "external-secrets-operator/external-secrets-operator-bundle",
    "cpe" : "cpe:/a:redhat:external_secrets_operator:1"
  }, {
    "product_name" : "External Secrets Operator for Red Hat OpenShift",
    "fix_state" : "Under investigation",
    "package_name" : "external-secrets-operator/external-secrets-operator-rhel9",
    "cpe" : "cpe:/a:redhat:external_secrets_operator:1"
  }, {
    "product_name" : "External Secrets Operator for Red Hat OpenShift",
    "fix_state" : "Under investigation",
    "package_name" : "external-secrets-operator/external-secrets-rhel9",
    "cpe" : "cpe:/a:redhat:external_secrets_operator:1"
  }, {
    "product_name" : "File Integrity Operator",
    "fix_state" : "Under investigation",
    "package_name" : "compliance/openshift-compliance-must-gather-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_file_integrity_operator:1"
  }, {
    "product_name" : "Kernel Module Management Operator for Red Hat Openshift",
    "fix_state" : "Under investigation",
    "package_name" : "kmm/kernel-module-management-must-gather-rhel9",
    "cpe" : "cpe:/a:redhat:kernel_module_management:2"
  }, {
    "product_name" : "Logging Subsystem for Red Hat OpenShift",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-logging/cluster-logging-rhel9-operator",
    "cpe" : "cpe:/a:redhat:logging:5"
  }, {
    "product_name" : "Logging Subsystem for Red Hat OpenShift",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-logging/cluster-logging-rhel9-operator",
    "cpe" : "cpe:/a:redhat:logging:6"
  }, {
    "product_name" : "Logical Volume Manager Storage",
    "fix_state" : "Under investigation",
    "package_name" : "lvms4/lvms-must-gather-rhel9",
    "cpe" : "cpe:/a:redhat:lvms:4"
  }, {
    "product_name" : "Machine Deletion Remediation Operator",
    "fix_state" : "Under investigation",
    "package_name" : "workload-availability/machine-deletion-remediation-operator-bundle",
    "cpe" : "cpe:/a:redhat:workload_availability_mdr:0"
  }, {
    "product_name" : "Machine Deletion Remediation Operator",
    "fix_state" : "Under investigation",
    "package_name" : "workload-availability/machine-deletion-remediation-rhel9-operator",
    "cpe" : "cpe:/a:redhat:workload_availability_mdr:0"
  }, {
    "product_name" : "Migration Toolkit for Containers",
    "fix_state" : "Under investigation",
    "package_name" : "rhmtc/openshift-migration-hook-runner-rhel8",
    "cpe" : "cpe:/a:redhat:rhmt:1"
  }, {
    "product_name" : "Migration Toolkit for Containers",
    "fix_state" : "Under investigation",
    "package_name" : "rhmtc/openshift-migration-log-reader-rhel8",
    "cpe" : "cpe:/a:redhat:rhmt:1"
  }, {
    "product_name" : "Migration Toolkit for Containers",
    "fix_state" : "Under investigation",
    "package_name" : "rhmtc/openshift-migration-must-gather-rhel8",
    "cpe" : "cpe:/a:redhat:rhmt:1"
  }, {
    "product_name" : "Migration Toolkit for Virtualization",
    "fix_state" : "Under investigation",
    "package_name" : "migration-toolkit-virtualization/mtv-must-gather-rhel8",
    "cpe" : "cpe:/a:redhat:migration_toolkit_virtualization:2"
  }, {
    "product_name" : "Migration Toolkit for Virtualization",
    "fix_state" : "Under investigation",
    "package_name" : "mtv-candidate/mtv-must-gather-rhel8",
    "cpe" : "cpe:/a:redhat:migration_toolkit_virtualization:2"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Under investigation",
    "package_name" : "multicluster-engine/assisted-installer-controller-rhel9",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Under investigation",
    "package_name" : "multicluster-engine/assisted-service-8-rhel8",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Under investigation",
    "package_name" : "multicluster-engine/assisted-service-9-rhel9",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Under investigation",
    "package_name" : "multicluster-engine/hypershift-cli-rhel9",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Under investigation",
    "package_name" : "multicluster-engine/hypershift-rhel9-operator",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Under investigation",
    "package_name" : "multicluster-engine/must-gather-rhel9",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Network Observability Operator",
    "fix_state" : "Under investigation",
    "package_name" : "network-observability/network-observability-cli-rhel9",
    "cpe" : "cpe:/a:redhat:network_observ_optr:1"
  }, {
    "product_name" : "Node HealthCheck Operator",
    "fix_state" : "Under investigation",
    "package_name" : "workload-availability/node-healthcheck-must-gather-rhel9",
    "cpe" : "cpe:/a:redhat:workload_availability_nhc:0"
  }, {
    "product_name" : "OpenShift API for Data Protection",
    "fix_state" : "Will not fix",
    "package_name" : "oadp/oadp-mustgather-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_api_data_protection:1"
  }, {
    "product_name" : "OpenShift API for Data Protection",
    "fix_state" : "Under investigation",
    "package_name" : "oadp/oadp-mustgather-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_api_data_protection:1"
  }, {
    "product_name" : "OpenShift Developer Tools and Services",
    "fix_state" : "Will not fix",
    "package_name" : "odo",
    "cpe" : "cpe:/a:redhat:ocp_tools"
  }, {
    "product_name" : "OpenShift Lightspeed",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-lightspeed/lightspeed-service-api-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_lightspeed"
  }, {
    "product_name" : "OpenShift Pipelines",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-pipelines/pipelines-controller-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_pipelines:1"
  }, {
    "product_name" : "OpenShift Pipelines",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-pipelines/pipelines-controller-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_pipelines:1"
  }, {
    "product_name" : "OpenShift Pipelines",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-pipelines/pipelines-entrypoint-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_pipelines:1"
  }, {
    "product_name" : "OpenShift Pipelines",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-pipelines/pipelines-entrypoint-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_pipelines:1"
  }, {
    "product_name" : "OpenShift Pipelines",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-pipelines/pipelines-events-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_pipelines:1"
  }, {
    "product_name" : "OpenShift Pipelines",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-pipelines/pipelines-events-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_pipelines:1"
  }, {
    "product_name" : "OpenShift Pipelines",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-pipelines/pipelines-nop-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_pipelines:1"
  }, {
    "product_name" : "OpenShift Pipelines",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-pipelines/pipelines-nop-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_pipelines:1"
  }, {
    "product_name" : "OpenShift Pipelines",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-pipelines/pipelines-resolvers-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_pipelines:1"
  }, {
    "product_name" : "OpenShift Pipelines",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-pipelines/pipelines-resolvers-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_pipelines:1"
  }, {
    "product_name" : "OpenShift Pipelines",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-pipelines/pipelines-sidecarlogresults-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_pipelines:1"
  }, {
    "product_name" : "OpenShift Pipelines",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-pipelines/pipelines-sidecarlogresults-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_pipelines:1"
  }, {
    "product_name" : "OpenShift Pipelines",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-pipelines/pipelines-webhook-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_pipelines:1"
  }, {
    "product_name" : "OpenShift Pipelines",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-pipelines/pipelines-webhook-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_pipelines:1"
  }, {
    "product_name" : "OpenShift Pipelines",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-pipelines/pipelines-workingdirinit-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_pipelines:1"
  }, {
    "product_name" : "OpenShift Pipelines",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-pipelines/pipelines-workingdirinit-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_pipelines:1"
  }, {
    "product_name" : "OpenShift Serverless",
    "fix_state" : "Affected",
    "package_name" : "openshift-serverless-1/client-kn-rhel8",
    "cpe" : "cpe:/a:redhat:serverless:1"
  }, {
    "product_name" : "OpenShift Serverless",
    "fix_state" : "Affected",
    "package_name" : "openshift-serverless-1-func-utils-rhel8-container",
    "cpe" : "cpe:/a:redhat:serverless:1"
  }, {
    "product_name" : "OpenShift Serverless",
    "fix_state" : "Affected",
    "package_name" : "openshift-serverless-1/kn-cli-artifacts-rhel8",
    "cpe" : "cpe:/a:redhat:serverless:1"
  }, {
    "product_name" : "OpenShift Serverless",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-serverless-1/kn-client-kn-rhel9",
    "cpe" : "cpe:/a:redhat:serverless:1"
  }, {
    "product_name" : "OpenShift Serverless",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-serverless-1/kn-plugin-func-func-util-rhel9",
    "cpe" : "cpe:/a:redhat:serverless:1"
  }, {
    "product_name" : "OpenShift Serverless",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-serverless-1/serverless-must-gather-rhel9",
    "cpe" : "cpe:/a:redhat:serverless:1"
  }, {
    "product_name" : "OpenShift Serverless",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-serverless-clients",
    "cpe" : "cpe:/a:redhat:serverless:1"
  }, {
    "product_name" : "OpenShift Service Mesh 3",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-service-mesh/istio-must-gather-rhel9",
    "cpe" : "cpe:/a:redhat:service_mesh:3"
  }, {
    "product_name" : "Power monitoring for Red Hat OpenShift",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-power-monitoring/power-monitoring-rhel9-operator",
    "cpe" : "cpe:/a:redhat:openshift_power_monitoring"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "flightctl",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/acm-must-gather-rhel9",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/kube-state-metrics-rhel9",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Affected",
    "package_name" : "rhacm2/multicluster-operators-subscription-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/multicluster-operators-subscription-rhel9",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/submariner-operator-bundle",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/submariner-rhel9-operator",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4",
    "fix_state" : "Under investigation",
    "package_name" : "advanced-cluster-security/rhacs-central-db-rhel8",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4",
    "fix_state" : "Under investigation",
    "package_name" : "advanced-cluster-security/rhacs-collector-rhel8",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4",
    "fix_state" : "Under investigation",
    "package_name" : "advanced-cluster-security/rhacs-main-rhel8",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4",
    "fix_state" : "Under investigation",
    "package_name" : "advanced-cluster-security/rhacs-operator-bundle",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4",
    "fix_state" : "Under investigation",
    "package_name" : "advanced-cluster-security/rhacs-rhel8-operator",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4",
    "fix_state" : "Under investigation",
    "package_name" : "advanced-cluster-security/rhacs-roxctl-rhel8",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4",
    "fix_state" : "Under investigation",
    "package_name" : "advanced-cluster-security/rhacs-scanner-db-rhel8",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4",
    "fix_state" : "Under investigation",
    "package_name" : "advanced-cluster-security/rhacs-scanner-db-slim-rhel8",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4",
    "fix_state" : "Under investigation",
    "package_name" : "advanced-cluster-security/rhacs-scanner-rhel8",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4",
    "fix_state" : "Under investigation",
    "package_name" : "advanced-cluster-security/rhacs-scanner-slim-rhel8",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4",
    "fix_state" : "Under investigation",
    "package_name" : "advanced-cluster-security/rhacs-scanner-v4-db-rhel8",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4",
    "fix_state" : "Under investigation",
    "package_name" : "advanced-cluster-security/rhacs-scanner-v4-rhel8",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Under investigation",
    "package_name" : "ansible-automation-platform-26/aap-must-gather-rhel9",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Under investigation",
    "package_name" : "ansible-automation-platform-26/ee-supported-rhel9",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Under investigation",
    "package_name" : "ansible-automation-platform-26/platform-resource-runner-rhel9",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Build of Kueue",
    "fix_state" : "Under investigation",
    "package_name" : "kueue/kueue-must-gather-rhel9",
    "cpe" : "cpe:/a:redhat:kueue_operator:1"
  }, {
    "product_name" : "Red Hat Ceph Storage 7",
    "fix_state" : "Affected",
    "package_name" : "rhceph/grafana-rhel9",
    "cpe" : "cpe:/a:redhat:ceph_storage:7"
  }, {
    "product_name" : "Red Hat Certification Program for Red Hat Enterprise Linux 9",
    "fix_state" : "Under investigation",
    "package_name" : "rhcertification/redhat-certification-baremetal",
    "cpe" : "cpe:/a:redhat:certifications:9"
  }, {
    "product_name" : "Red Hat Edge Manager preview",
    "fix_state" : "Under investigation",
    "package_name" : "flightctl",
    "cpe" : "cpe:/a:redhat:edge_manager:0"
  }, {
    "product_name" : "Red Hat Edge Manager preview",
    "fix_state" : "Under investigation",
    "package_name" : "rhem/flightctl-alert-exporter-rhel9",
    "cpe" : "cpe:/a:redhat:edge_manager:0"
  }, {
    "product_name" : "Red Hat Edge Manager preview",
    "fix_state" : "Under investigation",
    "package_name" : "rhem/flightctl-alertmanager-proxy-rhel9",
    "cpe" : "cpe:/a:redhat:edge_manager:0"
  }, {
    "product_name" : "Red Hat Edge Manager preview",
    "fix_state" : "Under investigation",
    "package_name" : "rhem/flightctl-api-rhel9",
    "cpe" : "cpe:/a:redhat:edge_manager:0"
  }, {
    "product_name" : "Red Hat Edge Manager preview",
    "fix_state" : "Under investigation",
    "package_name" : "rhem/flightctl-cli-artifacts-rhel9",
    "cpe" : "cpe:/a:redhat:edge_manager:0"
  }, {
    "product_name" : "Red Hat Edge Manager preview",
    "fix_state" : "Under investigation",
    "package_name" : "rhem/flightctl-db-setup-rhel9",
    "cpe" : "cpe:/a:redhat:edge_manager:0"
  }, {
    "product_name" : "Red Hat Edge Manager preview",
    "fix_state" : "Under investigation",
    "package_name" : "rhem/flightctl-periodic-rhel9",
    "cpe" : "cpe:/a:redhat:edge_manager:0"
  }, {
    "product_name" : "Red Hat Edge Manager preview",
    "fix_state" : "Under investigation",
    "package_name" : "rhem/flightctl-telemetry-gateway-rhel9",
    "cpe" : "cpe:/a:redhat:edge_manager:0"
  }, {
    "product_name" : "Red Hat Edge Manager preview",
    "fix_state" : "Under investigation",
    "package_name" : "rhem/flightctl-ui-ocp-rhel9",
    "cpe" : "cpe:/a:redhat:edge_manager:0"
  }, {
    "product_name" : "Red Hat Edge Manager preview",
    "fix_state" : "Under investigation",
    "package_name" : "rhem/flightctl-ui-rhel9",
    "cpe" : "cpe:/a:redhat:edge_manager:0"
  }, {
    "product_name" : "Red Hat Edge Manager preview",
    "fix_state" : "Under investigation",
    "package_name" : "rhem/flightctl-userinfo-proxy-rhel9",
    "cpe" : "cpe:/a:redhat:edge_manager:0"
  }, {
    "product_name" : "Red Hat Edge Manager preview",
    "fix_state" : "Under investigation",
    "package_name" : "rhem/flightctl-worker-rhel9",
    "cpe" : "cpe:/a:redhat:edge_manager:0"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Affected",
    "package_name" : "grafana",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux AI (RHEL AI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhelai1/bootc-amd-rhel9",
    "cpe" : "cpe:/a:redhat:enterprise_linux_ai:1"
  }, {
    "product_name" : "Red Hat Enterprise Linux AI (RHEL AI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhelai1/bootc-aws-nvidia-rhel9",
    "cpe" : "cpe:/a:redhat:enterprise_linux_ai:1"
  }, {
    "product_name" : "Red Hat Enterprise Linux AI (RHEL AI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhelai1/bootc-azure-amd-rhel9",
    "cpe" : "cpe:/a:redhat:enterprise_linux_ai:1"
  }, {
    "product_name" : "Red Hat Enterprise Linux AI (RHEL AI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhelai1/bootc-azure-nvidia-rhel9",
    "cpe" : "cpe:/a:redhat:enterprise_linux_ai:1"
  }, {
    "product_name" : "Red Hat Enterprise Linux AI (RHEL AI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhelai1/bootc-gcp-nvidia-rhel9",
    "cpe" : "cpe:/a:redhat:enterprise_linux_ai:1"
  }, {
    "product_name" : "Red Hat Enterprise Linux AI (RHEL AI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhelai1/bootc-intel-rhel9",
    "cpe" : "cpe:/a:redhat:enterprise_linux_ai:1"
  }, {
    "product_name" : "Red Hat Enterprise Linux AI (RHEL AI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhelai1/bootc-nvidia-rhel9",
    "cpe" : "cpe:/a:redhat:enterprise_linux_ai:1"
  }, {
    "product_name" : "Red Hat Enterprise Linux AI (RHEL AI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhelai1/instructlab-amd-rhel9",
    "cpe" : "cpe:/a:redhat:enterprise_linux_ai:1"
  }, {
    "product_name" : "Red Hat Enterprise Linux AI (RHEL AI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhelai1/instructlab-intel-rhel9",
    "cpe" : "cpe:/a:redhat:enterprise_linux_ai:1"
  }, {
    "product_name" : "Red Hat Enterprise Linux AI (RHEL AI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhelai1/instructlab-nvidia-rhel9",
    "cpe" : "cpe:/a:redhat:enterprise_linux_ai:1"
  }, {
    "product_name" : "Red Hat Enterprise Linux AI (RHEL AI) 3",
    "fix_state" : "Under investigation",
    "package_name" : "rhelai3/bootc-gcp-cuda-rhel9",
    "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Affected",
    "package_name" : "odh-data-science-pipelines-argo-argoexec-container",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Affected",
    "package_name" : "odh-data-science-pipelines-argo-workflowcontroller-container",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Affected",
    "package_name" : "rhoai/odh-data-science-pipelines-argo-argoexec-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Affected",
    "package_name" : "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhoai/odh-must-gather-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Under investigation",
    "package_name" : "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "cri-o",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/cnf-tests-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/cnf-tests-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/kube-compare-artifacts-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/lifecycle-agent-rhel9-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/microshift-bootc-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/network-tools-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/numaresources-must-gather-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/o-cloud-manager-operator-bundle",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/o-cloud-manager-rhel9-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/oc-mirror-plugin-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/oc-mirror-plugin-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-agent-installer-api-server-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-agent-installer-csr-approver-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-ansible-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-aws-cluster-api-controllers-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-azure-cloud-controller-manager-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-azure-cloud-node-manager-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-baremetal-installer-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-cli",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-cli-artifacts",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-cli-artifacts-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-cli-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-cluster-api-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-cluster-config-api-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-cluster-kube-cluster-api-rhel9-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-console",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-console-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-csi-driver-shared-resource-mustgather-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-deployer",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-deployer-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-dpu-cni-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-dpu-daemon-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-dpu-intel-ipu-p4sdk-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-dpu-intel-ipu-vsp-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-dpu-rhel9-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-helm-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-helm-rhel9-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-hypershift-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-ibmcloud-cluster-api-controllers-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-installer-altinfra-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-installer-artifacts-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-installer-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-kube-state-metrics-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-local-storage-mustgather-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-must-gather-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-olm-catalogd-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-olm-catalogd-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-olm-operator-controller-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-olm-rukpak-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-operator-framework-tools-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-operator-lifecycle-manager-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-operator-registry-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-operator-sdk-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-ovn-kubernetes-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-secrets-store-csi-mustgather-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-tests-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-tools-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ose-tools-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4/ptp-must-gather-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-clients",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "ose-azure-acr-image-credential-provider",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Under investigation",
    "package_name" : "redhat/redhat-operator-index",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4",
    "fix_state" : "Under investigation",
    "package_name" : "odf4/mcg-core-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4",
    "fix_state" : "Under investigation",
    "package_name" : "odf4/odf-cloudnative-pg-rhel9-operator",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4",
    "fix_state" : "Under investigation",
    "package_name" : "odf4/odf-csi-addons-rhel9-operator",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4",
    "fix_state" : "Under investigation",
    "package_name" : "odf4/odf-csi-addons-sidecar-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4",
    "fix_state" : "Under investigation",
    "package_name" : "odf4/odf-must-gather-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4"
  }, {
    "product_name" : "Red Hat OpenShift Dev Spaces",
    "fix_state" : "Not affected",
    "package_name" : "devspaces/devspaces-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift_devspaces:3"
  }, {
    "product_name" : "Red Hat OpenShift Dev Spaces",
    "fix_state" : "Under investigation",
    "package_name" : "devspaces/udi-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_devspaces:3"
  }, {
    "product_name" : "Red Hat OpenShift Dev Workspaces Operator",
    "fix_state" : "Under investigation",
    "package_name" : "devworkspace/devworkspace-operator-bundle",
    "cpe" : "cpe:/a:redhat:devworkspace"
  }, {
    "product_name" : "Red Hat OpenShift Dev Workspaces Operator",
    "fix_state" : "Under investigation",
    "package_name" : "devworkspace/devworkspace-project-clone-rhel9",
    "cpe" : "cpe:/a:redhat:devworkspace"
  }, {
    "product_name" : "Red Hat OpenShift Dev Workspaces Operator",
    "fix_state" : "Under investigation",
    "package_name" : "devworkspace/devworkspace-rhel9-operator",
    "cpe" : "cpe:/a:redhat:devworkspace"
  }, {
    "product_name" : "Red Hat OpenShift for Windows Containers",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4-wincw/windows-machine-config-operator-bundle",
    "cpe" : "cpe:/a:redhat:windows_machine_config"
  }, {
    "product_name" : "Red Hat OpenShift for Windows Containers",
    "fix_state" : "Under investigation",
    "package_name" : "openshift4-wincw/windows-machine-config-rhel9-operator",
    "cpe" : "cpe:/a:redhat:windows_machine_config"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-gitops-1/argocd-agent-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-gitops-1/argocd-extensions-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-gitops-1/argocd-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-gitops-1/argocd-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-gitops-1/argo-rollouts-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-gitops-1/console-plugin-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-gitops-1/dex-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-gitops-1/gitops-operator-bundle",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-gitops-1/gitops-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-gitops-1/gitops-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Under investigation",
    "package_name" : "openshift-gitops-1/must-gather-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 4",
    "fix_state" : "Will not fix",
    "package_name" : "container-native-virtualization/cluster-network-addons-operator",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:4"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 4",
    "fix_state" : "Affected",
    "package_name" : "container-native-virtualization/cluster-network-addons-operator-rhel9",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:4"
  }, {
    "product_name" : "Red Hat OpenStack Platform 16.2",
    "fix_state" : "Not affected",
    "package_name" : "osp-director-provisioner-container",
    "cpe" : "cpe:/a:redhat:openstack:16.2"
  }, {
    "product_name" : "Red Hat OpenStack Platform 16.2",
    "fix_state" : "Under investigation",
    "package_name" : "rhosp-rhel8/osp-director-agent",
    "cpe" : "cpe:/a:redhat:openstack:16.2"
  }, {
    "product_name" : "Red Hat OpenStack Platform 16.2",
    "fix_state" : "Under investigation",
    "package_name" : "rhosp-rhel8/osp-director-downloader",
    "cpe" : "cpe:/a:redhat:openstack:16.2"
  }, {
    "product_name" : "Red Hat OpenStack Platform 16.2",
    "fix_state" : "Under investigation",
    "package_name" : "rhosp-rhel8/osp-director-operator-bundle",
    "cpe" : "cpe:/a:redhat:openstack:16.2"
  }, {
    "product_name" : "Red Hat OpenStack Platform 16.2",
    "fix_state" : "Under investigation",
    "package_name" : "rhosp-rhel8-tech-preview/osp-director-provisioner",
    "cpe" : "cpe:/a:redhat:openstack:16.2"
  }, {
    "product_name" : "Red Hat OpenStack Platform 16.2",
    "fix_state" : "Under investigation",
    "package_name" : "rhosp-rhel9/osp-director-agent",
    "cpe" : "cpe:/a:redhat:openstack:16.2"
  }, {
    "product_name" : "Red Hat OpenStack Platform 16.2",
    "fix_state" : "Under investigation",
    "package_name" : "rhosp-rhel9/osp-director-downloader",
    "cpe" : "cpe:/a:redhat:openstack:16.2"
  }, {
    "product_name" : "Red Hat OpenStack Platform 16.2",
    "fix_state" : "Under investigation",
    "package_name" : "rhosp-rhel9/osp-director-operator",
    "cpe" : "cpe:/a:redhat:openstack:16.2"
  }, {
    "product_name" : "Red Hat OpenStack Platform 17.1",
    "fix_state" : "Under investigation",
    "package_name" : "rhosp-rhel9/osp-director-agent",
    "cpe" : "cpe:/a:redhat:openstack:17.1"
  }, {
    "product_name" : "Red Hat OpenStack Platform 17.1",
    "fix_state" : "Under investigation",
    "package_name" : "rhosp-rhel9/osp-director-downloader",
    "cpe" : "cpe:/a:redhat:openstack:17.1"
  }, {
    "product_name" : "Red Hat OpenStack Platform 17.1",
    "fix_state" : "Under investigation",
    "package_name" : "rhosp-rhel9/osp-director-operator",
    "cpe" : "cpe:/a:redhat:openstack:17.1"
  }, {
    "product_name" : "Red Hat OpenStack Platform 17.1",
    "fix_state" : "Under investigation",
    "package_name" : "rhosp-rhel9/osp-director-operator-bundle",
    "cpe" : "cpe:/a:redhat:openstack:17.1"
  }, {
    "product_name" : "Red Hat OpenStack Platform 18.0",
    "fix_state" : "Under investigation",
    "package_name" : "rhoso-operators/openstack-must-gather-rhel9",
    "cpe" : "cpe:/a:redhat:openstack:18.0"
  }, {
    "product_name" : "Red Hat OpenStack Platform 18.0",
    "fix_state" : "Under investigation",
    "package_name" : "rhoso-operators/openstack-operator-bundle",
    "cpe" : "cpe:/a:redhat:openstack:18.0"
  }, {
    "product_name" : "Red Hat Trusted Artifact Signer",
    "fix_state" : "Under investigation",
    "package_name" : "rhtas/gitsign-rhel9",
    "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1"
  }, {
    "product_name" : "Red Hat Web Terminal",
    "fix_state" : "Under investigation",
    "package_name" : "web-terminal/web-terminal-tooling-rhel9",
    "cpe" : "cpe:/a:redhat:webterminal:1"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2025-21614\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-21614\nhttps://github.com/go-git/go-git/security/advisories/GHSA-r9px-m959-cxf4\nhttps://pkg.go.dev/vuln/GO-2025-3367" ],
  "name" : "CVE-2025-21614",
  "csaw" : false
}