{ "threat_severity" : "Important", "public_date" : "2026-08-13T21:58:53Z", "bugzilla" : { "description" : "html/template: golang: Go html/template: Cross-Site Scripting via pathological input", "id" : "2515838", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2515838" }, "cvss3" : { "cvss3_base_score" : "8.1", "cvss3_scoring_vector" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "status" : "verified" }, "cwe" : "CWE-79", "details" : [ "Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.", "A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions." ], "statement" : "This is an Important cross-site scripting (XSS) vulnerability in the Go `html/template` package. Applications utilizing this package to render untrusted input are susceptible to arbitrary content injection due to a flaw in how pathological inputs are handled, potentially leading to client-side script execution.", "affected_release" : [ { "product_name" : "Red Hat Enterprise Linux 10", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60306", "cpe" : "cpe:/o:redhat:enterprise_linux:10.2", "package" : "golang-0:1.26.7-1.el10_2" }, { "product_name" : "Red Hat Enterprise Linux 10", "release_date" : "2026-09-03T00:00:00Z", "advisory" : "RHSA-2026:63022", "cpe" : "cpe:/o:redhat:enterprise_linux:10.2", "package" : "grafana-0:10.2.6-28.el10_2.5" }, { "product_name" : "Red Hat Enterprise Linux 10", "release_date" : "2026-09-03T00:00:00Z", "advisory" : "RHSA-2026:63119", "cpe" : "cpe:/o:redhat:enterprise_linux:10.2", "package" : "grafana-pcp-0:5.3.0-8.el10_2.1" }, { "product_name" : "Red Hat Enterprise Linux 10", "release_date" : "2026-09-04T00:00:00Z", "advisory" : "RHSA-2026:63332", "cpe" : "cpe:/o:redhat:enterprise_linux:10.2", "package" : "buildah-2:1.43.1-5.el10_2" }, { "product_name" : "Red Hat Enterprise Linux 10", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:64777", "cpe" : "cpe:/o:redhat:enterprise_linux:10.2", "package" : "buildah-2:1.43.1-6.el10_2" }, { "product_name" : "Red Hat Enterprise Linux 10", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:64818", "cpe" : "cpe:/o:redhat:enterprise_linux:10.2", "package" : "skopeo-2:1.22.2-5.el10_2" }, { "product_name" : "Red Hat Enterprise Linux 10", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65116", "cpe" : "cpe:/o:redhat:enterprise_linux:10.2", "package" : "opentelemetry-collector-0:0.152.1-2.el10_2" }, { "product_name" : "Red Hat Enterprise Linux 10", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65534", "cpe" : "cpe:/o:redhat:enterprise_linux:10.2", "package" : "image-builder-0:52.1-1.el10_2.2" }, { "product_name" : "Red Hat Enterprise Linux 10.0 Extended Update Support", "release_date" : "2026-09-01T00:00:00Z", "advisory" : "RHSA-2026:61882", "cpe" : "cpe:/o:redhat:enterprise_linux_eus:10.0", "package" : "golang-0:1.26.7-1.el10_0" }, { "product_name" : "Red Hat Enterprise Linux 10.0 Extended Update Support", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65335", "cpe" : "cpe:/o:redhat:enterprise_linux_eus:10.0", "package" : "ignition-0:2.21.0-3.el10_0.4" }, { "product_name" : "Red Hat Enterprise Linux 8", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60305", "cpe" : "cpe:/a:redhat:enterprise_linux:8", "package" : "go-toolset:rhel8-8100020260824145918.a3795dee" }, { "product_name" : "Red Hat Enterprise Linux 8", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62407", "cpe" : "cpe:/a:redhat:enterprise_linux:8", "package" : "grafana-0:9.2.10-33.el8_10" }, { "product_name" : "Red Hat Enterprise Linux 8", "release_date" : "2026-09-03T00:00:00Z", "advisory" : "RHSA-2026:63124", "cpe" : "cpe:/a:redhat:enterprise_linux:8", "package" : "grafana-pcp-0:5.1.1-18.el8_10" }, { "product_name" : "Red Hat Enterprise Linux 8", "release_date" : "2026-09-04T00:00:00Z", "advisory" : "RHSA-2026:63163", "cpe" : "cpe:/a:redhat:enterprise_linux:8", "package" : "container-tools:rhel8-8100020260901110702.afee755d" }, { "product_name" : "Red Hat Enterprise Linux 9", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60304", "cpe" : "cpe:/a:redhat:enterprise_linux:9", "package" : "golang-0:1.26.7-1.el9_8" }, { "product_name" : "Red Hat Enterprise Linux 9", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62406", "cpe" : "cpe:/a:redhat:enterprise_linux:9", "package" : "grafana-0:10.2.6-23.el9_8.3" }, { "product_name" : "Red Hat Enterprise Linux 9", "release_date" : "2026-09-03T00:00:00Z", "advisory" : "RHSA-2026:63130", "cpe" : "cpe:/a:redhat:enterprise_linux:9", "package" : "rhc-1:0.2.7-11.el9_8" }, { "product_name" : "Red Hat Enterprise Linux 9", "release_date" : "2026-09-03T00:00:00Z", "advisory" : "RHSA-2026:63136", "cpe" : "cpe:/a:redhat:enterprise_linux:9", "package" : "grafana-pcp-0:5.1.1-17.el9_8.1" }, { "product_name" : "Red Hat Enterprise Linux 9", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65117", "cpe" : "cpe:/a:redhat:enterprise_linux:9", "package" : "opentelemetry-collector-0:0.152.1-2.el9_8" }, { "product_name" : "Red Hat Enterprise Linux 9", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65153", "cpe" : "cpe:/a:redhat:enterprise_linux:9", "package" : "osbuild-composer-0:165.1-4.el9_8.1" }, { "product_name" : "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62602", "cpe" : "cpe:/a:redhat:rhel_e4s:9.2", "package" : "golang-0:1.26.7-1.el9_2" }, { "product_name" : "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62754", "cpe" : "cpe:/a:redhat:rhel_e4s:9.2", "package" : "osbuild-composer-0:76.1-9.el9_2" }, { "product_name" : "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65359", "cpe" : "cpe:/a:redhat:rhel_e4s:9.2", "package" : "ignition-0:2.15.0-2.el9_2.1" }, { "product_name" : "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62405", "cpe" : "cpe:/a:redhat:rhel_e4s:9.4", "package" : "golang-0:1.26.7-1.el9_4" }, { "product_name" : "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62753", "cpe" : "cpe:/a:redhat:rhel_e4s:9.4", "package" : "osbuild-composer-0:101.3-4.el9_4.6" }, { "product_name" : "Red Hat Enterprise Linux 9.6 Extended Update Support", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62404", "cpe" : "cpe:/a:redhat:rhel_eus:9.6", "package" : "golang-0:1.26.7-1.el9_6" }, { "product_name" : "Red Hat Enterprise Linux 9.6 Extended Update Support", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62803", "cpe" : "cpe:/a:redhat:rhel_eus:9.6", "package" : "osbuild-composer-0:132.2-12.el9_6" }, { "product_name" : "Red Hat Enterprise Linux 9.6 Extended Update Support", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65336", "cpe" : "cpe:/a:redhat:rhel_eus:9.6", "package" : "ignition-0:2.21.0-7.el9_6.1" }, { "product_name" : "Custom Metric Autoscaler 2.19", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62866", "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9", "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9:1788361753" }, { "product_name" : "Custom Metric Autoscaler 2.19", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62866", "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9", "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9:1788361758" }, { "product_name" : "Custom Metric Autoscaler 2.19", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62866", "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9", "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-http-add-on-interceptor-rhel9:1788290523" }, { "product_name" : "Custom Metric Autoscaler 2.19", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62866", "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9", "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-http-add-on-operator-rhel9:1788290620" }, { "product_name" : "Custom Metric Autoscaler 2.19", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62866", "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9", "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-http-add-on-scaler-rhel9:1788290333" }, { "product_name" : "Custom Metric Autoscaler 2.19", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62866", "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9", "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-operator-bundle:1788363289" }, { "product_name" : "Custom Metric Autoscaler 2.19", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62866", "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9", "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9:1788361799" }, { "product_name" : "Custom Metric Autoscaler 2.19", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62866", "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9", "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator:1788290121" }, { "product_name" : "Red Hat Developer Hub 1.10", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62851", "cpe" : "cpe:/a:redhat:rhdh:1.10::el9", "package" : "rhdh/rhdh-rhel9-operator:1788278786" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-08-14T00:00:00Z", "advisory" : "RHSA-2026:54835", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "golang1-26-main-1.26.6-0.1.hum1" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-08-14T00:00:00Z", "advisory" : "RHSA-2026:54836", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "golang1-25-main-1.25.13-0.1.hum1" }, { "product_name" : "Red Hat OpenShift AI 2.25", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65126", "cpe" : "cpe:/a:redhat:openshift_ai:2.25::el9", "package" : "rhoai/odh-kf-notebook-controller-rhel9:1788316212" }, { "product_name" : "Red Hat OpenShift AI 2.25", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65126", "cpe" : "cpe:/a:redhat:openshift_ai:2.25::el9", "package" : "rhoai/odh-notebook-controller-rhel9:1788316233" }, { "product_name" : "Red Hat OpenShift distributed tracing 3.11.0", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65343", "cpe" : "cpe:/a:redhat:openshift_distributed_tracing:3.11::el9", "package" : "rhosdt/tempo-rhel9:1788356473" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.0", "release_date" : "2026-08-25T00:00:00Z", "advisory" : "RHSA-2026:59548", "cpe" : "cpe:/a:redhat:service_mesh:3.0::el9", "package" : "openshift-service-mesh/kiali-rhel9:1787076495" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.0", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65106", "cpe" : "cpe:/a:redhat:service_mesh:3.0::el9", "package" : "openshift-service-mesh/istio-cni-rhel9:1788292951", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.0", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65106", "cpe" : "cpe:/a:redhat:service_mesh:3.0::el9", "package" : "openshift-service-mesh/istio-pilot-rhel9:1788292901", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.0", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65106", "cpe" : "cpe:/a:redhat:service_mesh:3.0::el9", "package" : "openshift-service-mesh/istio-proxyv2-rhel9:1788296328", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.0", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65106", "cpe" : "cpe:/a:redhat:service_mesh:3.0::el9", "package" : "openshift-service-mesh/istio-rhel9-operator:1788292915", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.1", "release_date" : "2026-08-25T00:00:00Z", "advisory" : "RHSA-2026:59561", "cpe" : "cpe:/a:redhat:service_mesh:3.1::el9", "package" : "openshift-service-mesh/kiali-rhel9:1787092198" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.1", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65112", "cpe" : "cpe:/a:redhat:service_mesh:3.1::el9", "package" : "openshift-service-mesh/istio-cni-rhel9:1788294468", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.1", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65112", "cpe" : "cpe:/a:redhat:service_mesh:3.1::el9", "package" : "openshift-service-mesh/istio-pilot-rhel9:1788294578", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.1", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65112", "cpe" : "cpe:/a:redhat:service_mesh:3.1::el9", "package" : "openshift-service-mesh/istio-proxyv2-rhel9:1788294715", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.1", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65112", "cpe" : "cpe:/a:redhat:service_mesh:3.1::el9", "package" : "openshift-service-mesh/istio-rhel9-operator:1788294534", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.2", "release_date" : "2026-08-25T00:00:00Z", "advisory" : "RHSA-2026:59554", "cpe" : "cpe:/a:redhat:service_mesh:3.2::el9", "package" : "openshift-service-mesh/kiali-rhel9:1787092255" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.2", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65113", "cpe" : "cpe:/a:redhat:service_mesh:3.2::el9", "package" : "openshift-service-mesh/istio-cni-rhel9:1788301003", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.2", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65113", "cpe" : "cpe:/a:redhat:service_mesh:3.2::el9", "package" : "openshift-service-mesh/istio-pilot-rhel9:1788301006", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.2", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65113", "cpe" : "cpe:/a:redhat:service_mesh:3.2::el9", "package" : "openshift-service-mesh/istio-proxyv2-rhel9:1788329366", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.2", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65113", "cpe" : "cpe:/a:redhat:service_mesh:3.2::el9", "package" : "openshift-service-mesh/istio-rhel9-operator:1788301001", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.3", "release_date" : "2026-08-25T00:00:00Z", "advisory" : "RHSA-2026:59566", "cpe" : "cpe:/a:redhat:service_mesh:3.3::el9", "package" : "openshift-service-mesh/kiali-rhel9:1787077108" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.3", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65115", "cpe" : "cpe:/a:redhat:service_mesh:3.3::el9", "package" : "openshift-service-mesh/istio-cni-rhel9:1788301494", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.3", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65115", "cpe" : "cpe:/a:redhat:service_mesh:3.3::el9", "package" : "openshift-service-mesh/istio-pilot-rhel9:1788301650", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.3", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65115", "cpe" : "cpe:/a:redhat:service_mesh:3.3::el9", "package" : "openshift-service-mesh/istio-proxyv2-rhel9:1788327866", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.3", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65115", "cpe" : "cpe:/a:redhat:service_mesh:3.3::el9", "package" : "openshift-service-mesh/istio-rhel9-operator:1788301636", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.4", "release_date" : "2026-08-25T00:00:00Z", "advisory" : "RHSA-2026:59583", "cpe" : "cpe:/a:redhat:service_mesh:3.4::el9", "package" : "openshift-service-mesh/kiali-rhel9:1787165683" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.4", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65121", "cpe" : "cpe:/a:redhat:service_mesh:3.4::el9", "package" : "openshift-service-mesh/istio-cni-rhel9:1788333736", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.4", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65121", "cpe" : "cpe:/a:redhat:service_mesh:3.4::el9", "package" : "openshift-service-mesh/istio-pilot-rhel9:1788333884", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.4", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65121", "cpe" : "cpe:/a:redhat:service_mesh:3.4::el9", "package" : "openshift-service-mesh/istio-proxyv2-rhel9:1788333924", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.4", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65121", "cpe" : "cpe:/a:redhat:service_mesh:3.4::el9", "package" : "openshift-service-mesh/istio-rhel9-operator:1788333618", "impact" : "important" }, { "product_name" : "Red Hat Quay 3.9", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65514", "cpe" : "cpe:/a:redhat:quay:3.9::el8", "package" : "quay/quay-rhel8:1788595574" } ], "package_state" : [ { "product_name" : "Assisted Installer for Red Hat OpenShift Container Platform 2", "fix_state" : "Affected", "package_name" : "rhai/assisted-installer-rhel9", "cpe" : "cpe:/a:redhat:assisted_installer:2" }, { "product_name" : "AWS Load Balancer Operator", "fix_state" : "Affected", "package_name" : "albo/aws-load-balancer-controller-rhel8", "cpe" : "cpe:/a:redhat:aws_lb_optr:1" }, { "product_name" : "Builds for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "openshift-builds/openshift-builds-waiters-rhel9", "cpe" : "cpe:/a:redhat:openshift_builds:1" }, { "product_name" : "cert-manager Operator for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "cert-manager/jetstack-cert-manager-rhel9", "cpe" : "cpe:/a:redhat:cert_manager:1" }, { "product_name" : "Compliance Operator", "fix_state" : "Affected", "package_name" : "compliance/openshift-compliance-operator-bundle", "cpe" : "cpe:/a:redhat:openshift_compliance_operator:1" }, { "product_name" : "Confidential Compute Attestation", "fix_state" : "Affected", "package_name" : "build-of-trustee/trustee-rhel9-operator", "cpe" : "cpe:/a:redhat:confidential_compute_attestation:1" }, { "product_name" : "Cryostat 4", "fix_state" : "Affected", "package_name" : "cryostat/cryostat-storage-rhel9", "cpe" : "cpe:/a:redhat:cryostat:4" }, { "product_name" : "Deployment Validation Operator", "fix_state" : "Affected", "package_name" : "dvo/deployment-validation-rhel8-operator", "cpe" : "cpe:/a:redhat:deployment_validator_operator" }, { "product_name" : "Exploit Intelligence", "fix_state" : "Affected", "package_name" : "exploit-intelligence-tech-preview/agent-client-rhel9", "cpe" : "cpe:/a:redhat:exploit_intelligence:0" }, { "product_name" : "Exploit Intelligence", "fix_state" : "Affected", "package_name" : "exploit-intelligence-tech-preview/exploit-intelligence-operator-controller-rhel9", "cpe" : "cpe:/a:redhat:exploit_intelligence:0" }, { "product_name" : "Exploit Intelligence", "fix_state" : "Affected", "package_name" : "exploit-intelligence-tech-preview/vulnerability-analysis-rhel9", "cpe" : "cpe:/a:redhat:exploit_intelligence:0" }, { "product_name" : "External Secrets Operator for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "external-secrets-operator/external-secrets-rhel9", "cpe" : "cpe:/a:redhat:external_secrets_operator:1" }, { "product_name" : "File Integrity Operator", "fix_state" : "Affected", "package_name" : "compliance/openshift-compliance-operator-bundle", "cpe" : "cpe:/a:redhat:openshift_file_integrity_operator:1" }, { "product_name" : "Gatekeeper 3", "fix_state" : "Not affected", "package_name" : "gatekeeper/gatekeeper-rhel9-operator", "cpe" : "cpe:/a:redhat:gatekeeper:3" }, { "product_name" : "Logging Subsystem for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "openshift-logging/eventrouter-rhel9", "cpe" : "cpe:/a:redhat:logging:6" }, { "product_name" : "Logical Volume Manager Storage", "fix_state" : "Affected", "package_name" : "lvms4/lvms-rhel9-operator", "cpe" : "cpe:/a:redhat:lvms:4" }, { "product_name" : "Logical Volume Manager Storage", "fix_state" : "Affected", "package_name" : "lvms4/topolvm-rhel8", "cpe" : "cpe:/a:redhat:lvms:4" }, { "product_name" : "Logical Volume Manager Storage", "fix_state" : "Affected", "package_name" : "lvms4/topolvm-rhel9", "cpe" : "cpe:/a:redhat:lvms:4" }, { "product_name" : "Migration Toolkit for Applications 8", "fix_state" : "Affected", "package_name" : "mta/mta-cli-rhel9", "cpe" : "cpe:/a:redhat:migration_toolkit_applications:8" }, { "product_name" : "Migration Toolkit for Containers", "fix_state" : "Affected", "package_name" : "rhmtc/openshift-migration-controller-rhel8", "cpe" : "cpe:/a:redhat:rhmt:1" }, { "product_name" : "Multiarch Tuning Operator", "fix_state" : "Affected", "package_name" : "multiarch-tuning/multiarch-tuning-rhel9-operator", "cpe" : "cpe:/a:redhat:multiarch_tuning_operator" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/discovery-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/maestro-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Global Hub", "fix_state" : "Affected", "package_name" : "multicluster-globalhub/multicluster-globalhub-agent-rhel9", "cpe" : "cpe:/a:redhat:multicluster_globalhub" }, { "product_name" : "Network Observability Operator", "fix_state" : "Affected", "package_name" : "network-observability/network-observability-cli-rhel9", "cpe" : "cpe:/a:redhat:network_observ_optr:1" }, { "product_name" : "Node Maintenance Operator", "fix_state" : "Affected", "package_name" : "workload-availability/node-maintenance-operator-bundle", "cpe" : "cpe:/a:redhat:workload_availability_nmo:5" }, { "product_name" : "OpenShift API for Data Protection", "fix_state" : "Affected", "package_name" : "oadp/oadp-velero-rhel9", "cpe" : "cpe:/a:redhat:openshift_api_data_protection:1" }, { "product_name" : "OpenShift Developer Tools and Services", "fix_state" : "Affected", "package_name" : "helm", "cpe" : "cpe:/a:redhat:ocp_tools" }, { "product_name" : "OpenShift Lightspeed", "fix_state" : "Affected", "package_name" : "openshift-lightspeed/otelcol-lightspeed-rhel9", "cpe" : "cpe:/a:redhat:openshift_lightspeed" }, { "product_name" : "OpenShift Pipelines", "fix_state" : "Affected", "package_name" : "openshift-pipelines-client", "cpe" : "cpe:/a:redhat:openshift_pipelines:1" }, { "product_name" : "OpenShift Pipelines", "fix_state" : "Affected", "package_name" : "openshift-pipelines/pipelines-scheduler-rhel9", "cpe" : "cpe:/a:redhat:openshift_pipelines:1" }, { "product_name" : "OpenShift Serverless", "fix_state" : "Affected", "package_name" : "kn-workflow-plugin", "cpe" : "cpe:/a:redhat:serverless:1" }, { "product_name" : "OpenShift Serverless", "fix_state" : "Affected", "package_name" : "openshift-serverless-1/kn-plugin-event-sender-rhel9", "cpe" : "cpe:/a:redhat:serverless:1" }, { "product_name" : "OpenShift Serverless", "fix_state" : "Affected", "package_name" : "openshift-serverless-clients", "cpe" : "cpe:/a:redhat:serverless:1" }, { "product_name" : "Power monitoring for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "openshift-power-monitoring/kepler-rhel9", "cpe" : "cpe:/a:redhat:openshift_power_monitoring" }, { "product_name" : "Red Hat 3scale API Management Platform 2", "fix_state" : "Not affected", "package_name" : "3scale-amp2/3scale-operator-bundle", "cpe" : "cpe:/a:redhat:red_hat_3scale_amp:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Will not fix", "package_name" : "flightctl", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/subctl-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/thanos-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Security 4", "fix_state" : "Affected", "package_name" : "advanced-cluster-security/rhacs-main-rhel8", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4" }, { "product_name" : "Red Hat Advanced Cluster Security 4", "fix_state" : "Affected", "package_name" : "advanced-cluster-security/rhacs-main-rhel9", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4" }, { "product_name" : "Red Hat AI Inference Server", "fix_state" : "Will not fix", "package_name" : "rhaiis/vllm-cpu-rhel9", "cpe" : "cpe:/a:redhat:ai_inference_server:3" }, { "product_name" : "Red Hat AI Inference Server", "fix_state" : "Will not fix", "package_name" : "rhaiis/vllm-tpu-rhel9", "cpe" : "cpe:/a:redhat:ai_inference_server:3" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Affected", "package_name" : "ansible-automation-platform-26/receptor-rhel9", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Affected", "package_name" : "ansible-automation-platform-27/receptor-rhel9", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Affected", "package_name" : "automation-gateway-proxy", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "automation-gateway-proxy-openssl30", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "automation-gateway-proxy-openssl32", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Affected", "package_name" : "receptor", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ceph Storage 5", "fix_state" : "Affected", "package_name" : "rhceph/snmp-notifier-rhel8", "cpe" : "cpe:/a:redhat:ceph_storage:5" }, { "product_name" : "Red Hat Ceph Storage 6", "fix_state" : "Affected", "package_name" : "rhceph/snmp-notifier-rhel9", "cpe" : "cpe:/a:redhat:ceph_storage:6" }, { "product_name" : "Red Hat Ceph Storage 7", "fix_state" : "Affected", "package_name" : "rhceph/grafana-rhel9", "cpe" : "cpe:/a:redhat:ceph_storage:7" }, { "product_name" : "Red Hat Ceph Storage 8", "fix_state" : "Affected", "package_name" : "libarrow", "cpe" : "cpe:/a:redhat:ceph_storage:8" }, { "product_name" : "Red Hat Ceph Storage 8", "fix_state" : "Affected", "package_name" : "rhceph/grafana-rhel9", "cpe" : "cpe:/a:redhat:ceph_storage:8" }, { "product_name" : "Red Hat Ceph Storage 9", "fix_state" : "Affected", "package_name" : "libarrow", "cpe" : "cpe:/a:redhat:ceph_storage:9" }, { "product_name" : "Red Hat Ceph Storage 9", "fix_state" : "Affected", "package_name" : "rhceph/alloy-rhel10", "cpe" : "cpe:/a:redhat:ceph_storage:9" }, { "product_name" : "Red Hat Certification Program for Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "redhat-certification-cnf", "cpe" : "cpe:/a:redhat:certifications:9" }, { "product_name" : "Red Hat Certification Program for Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "redhat-certification-preflight", "cpe" : "cpe:/a:redhat:certifications:9" }, { "product_name" : "Red Hat Connectivity Link 1", "fix_state" : "Affected", "package_name" : "rhcl-1/coredns-rhel9", "cpe" : "cpe:/a:redhat:connectivity_link:1" }, { "product_name" : "Red Hat Edge Manager 1", "fix_state" : "Affected", "package_name" : "flightctl", "cpe" : "cpe:/a:redhat:edge_manager:1" }, { "product_name" : "Red Hat Edge Manager 1", "fix_state" : "Affected", "package_name" : "rhem/flightctl-api-rhel9", "cpe" : "cpe:/a:redhat:edge_manager:1" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "delve", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Not affected", "package_name" : "go-fdo-client", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Not affected", "package_name" : "go-fdo-server", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "gvisor-tap-vsock", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "ignition", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "osbuild-composer", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "podman", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "toolbox", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Not affected", "package_name" : "trustee", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Not affected", "package_name" : "trustee-guest-components", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 7", "fix_state" : "Not affected", "package_name" : "compat-sap-c++-11", "cpe" : "cpe:/o:redhat:enterprise_linux:7" }, { "product_name" : "Red Hat Enterprise Linux 7", "fix_state" : "Affected", "package_name" : "rhc-worker-script", "cpe" : "cpe:/o:redhat:enterprise_linux:7" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Not affected", "package_name" : "compat-sap-c++-11", "cpe" : "cpe:/o:redhat:enterprise_linux:8" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Affected", "package_name" : "osbuild-composer", "cpe" : "cpe:/o:redhat:enterprise_linux:8" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Affected", "package_name" : "rhc", "cpe" : "cpe:/o:redhat:enterprise_linux:8" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "buildah", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Not affected", "package_name" : "conmon", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "containernetworking-plugins", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "delve", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "gvisor-tap-vsock", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "ignition", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "image-builder", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "podman", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "skopeo", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "toolbox", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Not affected", "package_name" : "trustee-guest-components", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux AI (RHEL AI) 3", "fix_state" : "Affected", "package_name" : "golang", "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3" }, { "product_name" : "Red Hat Lightspeed for Runtimes Operator", "fix_state" : "Affected", "package_name" : "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator", "cpe" : "cpe:/a:redhat:lightspeed_for_runtimes:1" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-ai-gateway-payload-processing-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-codeflare-operator-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-dashboard-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-data-science-pipelines-operator-controller-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-eval-hub-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-feast-operator-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-kserve-agent-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-kserve-controller-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-kserve-llmisvc-controller-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-kserve-router-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-kube-auth-proxy-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-kuberay-operator-controller-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-kueue-controller-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-llama-stack-k8s-operator-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-llm-d-batch-gateway-apiserver-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-llm-d-batch-gateway-gc-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-llm-d-batch-gateway-processor-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-llm-d-inference-scheduler-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-llm-d-routing-sidecar-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-maas-api-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-maas-controller-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Not affected", "package_name" : "rhoai/odh-mlflow-operator-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-ml-pipelines-api-server-v2-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-ml-pipelines-driver-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-ml-pipelines-launcher-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-mm-rest-proxy-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-mod-arch-automl-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-mod-arch-autorag-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-mod-arch-eval-hub-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-mod-arch-gen-ai-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-mod-arch-maas-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-mod-arch-mlflow-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-mod-arch-model-registry-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-model-controller-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-modelmesh-runtime-adapter-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-modelmesh-serving-controller-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-model-registry-operator-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-model-registry-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-model-serving-api-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-must-gather-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-rhaii-cluster-validator-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-rhel9-operator", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-spark-operator-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-ta-lmes-driver-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-th06-cpu-torch291-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-th06-cuda130-torch291-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-trainer-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-training-operator-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-trustyai-service-operator-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-workload-variant-autoscaler-controller-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/rhai-cli-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift Cluster Manager CLI", "fix_state" : "Affected", "package_name" : "ocm-cli-clients/ocm-cli-rhel9", "cpe" : "cpe:/a:redhat:openshift_cluster_manager_cli:1" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "conmon", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "conmon-rs", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "containernetworking-plugins", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "cri-o", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "cri-tools", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "ignition", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "microshift", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift4/frr-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-cli", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift-clients", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift-golang-builder-container", "cpe" : "cpe:/a:redhat:openshift:4", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "ose-aws-ecr-image-credential-provider", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "ose-azure-acr-image-credential-provider", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "ose-gcp-gcr-image-credential-provider", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "podman", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "skopeo", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "toolbox", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat Openshift Data Foundation 4", "fix_state" : "Not affected", "package_name" : "odf4/cephcsi-rhel9", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4" }, { "product_name" : "Red Hat OpenShift Dev Spaces", "fix_state" : "Affected", "package_name" : "devspaces/udi-rhel9", "cpe" : "cpe:/a:redhat:openshift_devspaces:3" }, { "product_name" : "Red Hat OpenShift Dev Workspaces Operator", "fix_state" : "Affected", "package_name" : "devworkspace/devworkspace-rhel9-operator", "cpe" : "cpe:/a:redhat:devworkspace" }, { "product_name" : "Red Hat OpenShift for Windows Containers", "fix_state" : "Affected", "package_name" : "openshift4-wincw/windows-machine-config-rhel9-operator", "cpe" : "cpe:/a:redhat:windows_machine_config" }, { "product_name" : "Red Hat OpenShift GitOps", "fix_state" : "Affected", "package_name" : "microshift-gitops", "cpe" : "cpe:/a:redhat:openshift_gitops:1" }, { "product_name" : "Red Hat OpenShift GitOps", "fix_state" : "Affected", "package_name" : "openshift-gitops-1/dex-rhel8", "cpe" : "cpe:/a:redhat:openshift_gitops:1" }, { "product_name" : "Red Hat OpenShift GitOps", "fix_state" : "Affected", "package_name" : "openshift-gitops-1/dex-rhel9", "cpe" : "cpe:/a:redhat:openshift_gitops:1" }, { "product_name" : "Red Hat OpenShift GitOps", "fix_state" : "Not affected", "package_name" : "openshift-gitops-argocd-cli", "cpe" : "cpe:/a:redhat:openshift_gitops:1" }, { "product_name" : "Red Hat OpenShift on AWS", "fix_state" : "Affected", "package_name" : "rosa", "cpe" : "cpe:/a:redhat:openshift_service_on_aws:1" }, { "product_name" : "Red Hat OpenShift Virtualization 4", "fix_state" : "Affected", "package_name" : "container-native-virtualization/kubemacpool-rhel9", "cpe" : "cpe:/a:redhat:container_native_virtualization:4" }, { "product_name" : "Red Hat OpenShift Virtualization 4", "fix_state" : "Affected", "package_name" : "openshift-golang-builder-container", "cpe" : "cpe:/a:redhat:container_native_virtualization:4", "impact" : "important" }, { "product_name" : "Red Hat OpenStack Platform 16.2", "fix_state" : "Affected", "package_name" : "etcd", "cpe" : "cpe:/a:redhat:openstack:16.2" }, { "product_name" : "Red Hat OpenStack Platform 16.2", "fix_state" : "Affected", "package_name" : "rhosp-rhel8/osp-director-agent", "cpe" : "cpe:/a:redhat:openstack:16.2" }, { "product_name" : "Red Hat OpenStack Platform 17.1", "fix_state" : "Affected", "package_name" : "etcd", "cpe" : "cpe:/a:redhat:openstack:17.1" }, { "product_name" : "Red Hat OpenStack Platform 17.1", "fix_state" : "Affected", "package_name" : "rhosp-rhel9/osp-director-agent", "cpe" : "cpe:/a:redhat:openstack:17.1" }, { "product_name" : "Red Hat OpenStack Platform 18.0", "fix_state" : "Affected", "package_name" : "golang-github-openstack-k8s-operators-os-diff", "cpe" : "cpe:/a:redhat:openstack:18.0" }, { "product_name" : "Red Hat OpenStack Platform 18.0", "fix_state" : "Affected", "package_name" : "rhoso-operators/ovn-rhel9-operator", "cpe" : "cpe:/a:redhat:openstack:18.0" }, { "product_name" : "Red Hat Quay 3", "fix_state" : "Affected", "package_name" : "quay/quay-rhel9", "cpe" : "cpe:/a:redhat:quay:3" }, { "product_name" : "Red Hat Satellite 6", "fix_state" : "Affected", "package_name" : "satellite/iop-vmaas-rhel9", "cpe" : "cpe:/a:redhat:satellite:6" }, { "product_name" : "Red Hat Satellite 6", "fix_state" : "Affected", "package_name" : "yggdrasil-worker-forwarder", "cpe" : "cpe:/a:redhat:satellite:6" }, { "product_name" : "Red Hat Satellite Client", "fix_state" : "Affected", "package_name" : "foreman_ygg_worker", "cpe" : "cpe:/a:redhat:rhel_satellite_client:6::el7" }, { "product_name" : "Red Hat Satellite Client", "fix_state" : "Affected", "package_name" : "yggdrasil", "cpe" : "cpe:/a:redhat:rhel_satellite_client:6::el7" }, { "product_name" : "Red Hat Service Interconnect 2", "fix_state" : "Affected", "package_name" : "service-interconnect/skupper-cli-rhel9", "cpe" : "cpe:/a:redhat:service_interconnect:2" }, { "product_name" : "Red Hat Service Interconnect 2", "fix_state" : "Affected", "package_name" : "skupper-cli", "cpe" : "cpe:/a:redhat:service_interconnect:2" }, { "product_name" : "Red Hat Trusted Artifact Signer", "fix_state" : "Affected", "package_name" : "rhtas/ec-rhel9", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1" }, { "product_name" : "Security Profiles Operator", "fix_state" : "Affected", "package_name" : "compliance/openshift-selinuxd-rhel8", "cpe" : "cpe:/a:redhat:openshift_security_profiles_operator:1" }, { "product_name" : "Zero Trust Workload Identity Manager", "fix_state" : "Not affected", "package_name" : "zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9", "cpe" : "cpe:/a:redhat:zero_trust_workload_identity_manager:1" }, { "product_name" : "Zero Trust Workload Identity Manager - Tech Preview", "fix_state" : "Will not fix", "package_name" : "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9", "cpe" : "cpe:/a:redhat:zero_trust_workload_identity_manager:0" } ], "references" : [ "https://www.cve.org/CVERecord?id=CVE-2026-56858\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-56858\nhttps://go.dev/cl/807100\nhttps://go.dev/issue/80435\nhttps://groups.google.com/g/golang-announce/c/94pEornpRlI\nhttps://pkg.go.dev/vuln/GO-2026-6091" ], "name" : "CVE-2026-56858", "csaw" : false }