{
  "threat_severity" : "Important",
  "public_date" : "2026-08-03T19:56:13Z",
  "bugzilla" : {
    "description" : "ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass",
    "id" : "2510801",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2510801"
  },
  "cvss3" : {
    "cvss3_base_score" : "8.6",
    "cvss3_scoring_vector" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
    "status" : "verified"
  },
  "cwe" : "CWE-1389",
  "details" : [ "ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.3.1, Address4 accepts an octet written with a leading zero and decodes it as decimal, while the WHATWG URL host parser, inet_aton, and getaddrinfo all decode a leading zero as octal. The library and the network stack therefore disagree about which host a string names. new Address4('012.0.0.1') reports correctForm() of 12.0.0.1 and isPrivate() of false, but fetch('http://012.0.0.1/') connects to 10.0.0.1. An application that builds a network trust-boundary decision on these checks, for example a filter intended to block Server-Side Request Forgery, or SSRF, will classify an internal target as external and allow the request. The defect is in the parse gate rather than in any one classifier, so every consumer of Address4 inherits it: isPrivate(), isLoopback(), isLinkLocal(), isCGNAT(), isInSubnet(), isHostInSubnet(), and correctForm() are all computed from the mis-decoded octets. This issue is fixed in version 10.3.1.", "A flaw was found in the `ip-address` library. This library incorrectly interprets IPv4 address octets with leading zeros as decimal, while standard network parsers interpret them as octal. This inconsistency can cause applications to misclassify network targets, allowing a remote attacker to bypass security measures like Server-Side Request Forgery (SSRF) filters and potentially gain unauthorized access to internal systems." ],
  "statement" : "This Important flaw in the `ip-address` JavaScript library can lead to Server-Side Request Forgery (SSRF) and trust-boundary bypass. The library's inconsistent parsing of IP address octets with leading zeros, which it interprets as decimal while the network stack interprets them as octal, can cause applications to misclassify internal IP addresses as external. This discrepancy can bypass security filters designed to prevent access to internal resources.",
  "affected_release" : [ {
    "product_name" : "Red Hat Enterprise Linux 10",
    "release_date" : "2026-08-17T00:00:00Z",
    "advisory" : "RHSA-2026:55541",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10.2",
    "package" : "nodejs22-1:22.23.1-6.el10_2"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "release_date" : "2026-08-20T00:00:00Z",
    "advisory" : "RHSA-2026:57590",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10.2",
    "package" : "rh-podman-desktop-0:1.1.2-1.el10_2"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "release_date" : "2026-08-24T00:00:00Z",
    "advisory" : "RHSA-2026:58819",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10.2",
    "package" : "nodejs24-1:24.18.0-5.el10_2"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10.0 Extended Update Support",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:64817",
    "cpe" : "cpe:/o:redhat:enterprise_linux_eus:10.0",
    "package" : "nodejs22-1:22.23.2-1.el10_0"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "release_date" : "2026-08-12T00:00:00Z",
    "advisory" : "RHSA-2026:54371",
    "cpe" : "cpe:/a:redhat:enterprise_linux:8",
    "package" : "nodejs:24-8100020260807112957.6d880403"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "release_date" : "2026-08-13T00:00:00Z",
    "advisory" : "RHSA-2026:54530",
    "cpe" : "cpe:/a:redhat:enterprise_linux:8",
    "package" : "nodejs:22-8100020260807115047.6d880403"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2026-08-17T00:00:00Z",
    "advisory" : "RHSA-2026:55601",
    "cpe" : "cpe:/a:redhat:enterprise_linux:9",
    "package" : "nodejs:22-9080020260806135640.rhel9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2026-08-17T00:00:00Z",
    "advisory" : "RHSA-2026:55603",
    "cpe" : "cpe:/a:redhat:enterprise_linux:9",
    "package" : "nodejs:24-9080020260806135511.rhel9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9.6 Extended Update Support",
    "release_date" : "2026-09-02T00:00:00Z",
    "advisory" : "RHSA-2026:62416",
    "cpe" : "cpe:/a:redhat:rhel_eus:9.6",
    "package" : "nodejs:22-9060020260901085634.rhel9"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.17",
    "release_date" : "2026-08-25T00:00:00Z",
    "advisory" : "RHSA-2026:59593",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.17::el9",
    "package" : "multicluster-engine/console-mce-rhel9:1786668856"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.6",
    "release_date" : "2026-08-25T00:00:00Z",
    "advisory" : "RHSA-2026:59579",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.6::el9",
    "package" : "multicluster-engine/console-mce-rhel9:1787264250"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.8",
    "release_date" : "2026-08-25T00:00:00Z",
    "advisory" : "RHSA-2026:59558",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.8::el9",
    "package" : "multicluster-engine/console-mce-rhel9:1787259048"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.9",
    "release_date" : "2026-08-25T00:00:00Z",
    "advisory" : "RHSA-2026:59559",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.9::el9",
    "package" : "multicluster-engine/console-mce-rhel9:1787079359"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.11",
    "release_date" : "2026-08-26T00:00:00Z",
    "advisory" : "RHSA-2026:60387",
    "cpe" : "cpe:/a:redhat:acm:2.11::el9",
    "package" : "rhacm2/console-rhel9:1787687062"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13",
    "release_date" : "2026-08-26T00:00:00Z",
    "advisory" : "RHSA-2026:60390",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "rhacm2/console-rhel9:1787339249"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.14",
    "release_date" : "2026-08-26T00:00:00Z",
    "advisory" : "RHSA-2026:60388",
    "cpe" : "cpe:/a:redhat:acm:2.14::el9",
    "package" : "rhacm2/console-rhel9:1787339248"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.17",
    "release_date" : "2026-08-26T00:00:00Z",
    "advisory" : "RHSA-2026:60386",
    "cpe" : "cpe:/a:redhat:acm:2.17::el9",
    "package" : "rhacm2/console-rhel9:1787335105"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2.1",
    "release_date" : "2026-08-18T00:00:00Z",
    "advisory" : "RHSA-2026:56338",
    "cpe" : "cpe:/a:redhat:ansible_portal:2.1",
    "package" : "ansible-automation-platform/automation-portal:1787047114"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2.2",
    "release_date" : "2026-08-18T00:00:00Z",
    "advisory" : "RHSA-2026:56357",
    "cpe" : "cpe:/a:redhat:ansible_portal:2.2",
    "package" : "ansible-automation-platform/automation-portal:1787047188"
  }, {
    "product_name" : "Red Hat Developer Hub 1.10",
    "release_date" : "2026-08-31T00:00:00Z",
    "advisory" : "RHSA-2026:61721",
    "cpe" : "cpe:/a:redhat:rhdh:1.10::el9",
    "package" : "rhdh/red-hat-developer-hub-backstage-plugin-lightspeed:1788187400"
  }, {
    "product_name" : "Red Hat Developer Hub 1.10",
    "release_date" : "2026-08-31T00:00:00Z",
    "advisory" : "RHSA-2026:61721",
    "cpe" : "cpe:/a:redhat:rhdh:1.10::el9",
    "package" : "rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend:1788186854"
  }, {
    "product_name" : "Red Hat Developer Hub 1.10",
    "release_date" : "2026-08-31T00:00:00Z",
    "advisory" : "RHSA-2026:61721",
    "cpe" : "cpe:/a:redhat:rhdh:1.10::el9",
    "package" : "rhdh/red-hat-developer-hub-backstage-plugin-orchestrator:1788186989"
  }, {
    "product_name" : "Red Hat Developer Hub 1.10",
    "release_date" : "2026-08-31T00:00:00Z",
    "advisory" : "RHSA-2026:61721",
    "cpe" : "cpe:/a:redhat:rhdh:1.10::el9",
    "package" : "rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend:1788187326"
  }, {
    "product_name" : "Red Hat Developer Hub 1.10",
    "release_date" : "2026-08-31T00:00:00Z",
    "advisory" : "RHSA-2026:61721",
    "cpe" : "cpe:/a:redhat:rhdh:1.10::el9",
    "package" : "rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki:1788187449"
  }, {
    "product_name" : "Red Hat Developer Hub 1.10",
    "release_date" : "2026-08-31T00:00:00Z",
    "advisory" : "RHSA-2026:61721",
    "cpe" : "cpe:/a:redhat:rhdh:1.10::el9",
    "package" : "rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets:1788186625"
  }, {
    "product_name" : "Red Hat Developer Hub 1.10",
    "release_date" : "2026-08-31T00:00:00Z",
    "advisory" : "RHSA-2026:61721",
    "cpe" : "cpe:/a:redhat:rhdh:1.10::el9",
    "package" : "rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator:1788187032"
  }, {
    "product_name" : "Red Hat Developer Hub 1.10",
    "release_date" : "2026-08-31T00:00:00Z",
    "advisory" : "RHSA-2026:61735",
    "cpe" : "cpe:/a:redhat:rhdh:1.10::el9",
    "package" : "rhdh/red-hat-developer-hub-backstage-plugin-lightspeed:1788187400"
  }, {
    "product_name" : "Red Hat Developer Hub 1.10",
    "release_date" : "2026-08-31T00:00:00Z",
    "advisory" : "RHSA-2026:61735",
    "cpe" : "cpe:/a:redhat:rhdh:1.10::el9",
    "package" : "rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend:1788186854"
  }, {
    "product_name" : "Red Hat Developer Hub 1.10",
    "release_date" : "2026-08-31T00:00:00Z",
    "advisory" : "RHSA-2026:61735",
    "cpe" : "cpe:/a:redhat:rhdh:1.10::el9",
    "package" : "rhdh/red-hat-developer-hub-backstage-plugin-orchestrator:1788186989"
  }, {
    "product_name" : "Red Hat Developer Hub 1.10",
    "release_date" : "2026-08-31T00:00:00Z",
    "advisory" : "RHSA-2026:61735",
    "cpe" : "cpe:/a:redhat:rhdh:1.10::el9",
    "package" : "rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend:1788187326"
  }, {
    "product_name" : "Red Hat Developer Hub 1.10",
    "release_date" : "2026-08-31T00:00:00Z",
    "advisory" : "RHSA-2026:61735",
    "cpe" : "cpe:/a:redhat:rhdh:1.10::el9",
    "package" : "rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki:1788187449"
  }, {
    "product_name" : "Red Hat Developer Hub 1.10",
    "release_date" : "2026-08-31T00:00:00Z",
    "advisory" : "RHSA-2026:61735",
    "cpe" : "cpe:/a:redhat:rhdh:1.10::el9",
    "package" : "rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets:1788186625"
  }, {
    "product_name" : "Red Hat Developer Hub 1.10",
    "release_date" : "2026-08-31T00:00:00Z",
    "advisory" : "RHSA-2026:61735",
    "cpe" : "cpe:/a:redhat:rhdh:1.10::el9",
    "package" : "rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator:1788187032"
  }, {
    "product_name" : "Red Hat Developer Hub 1.10",
    "release_date" : "2026-09-02T00:00:00Z",
    "advisory" : "RHSA-2026:62851",
    "cpe" : "cpe:/a:redhat:rhdh:1.10::el9",
    "package" : "rhdh/rhdh-hub-rhel9:1788286049"
  }, {
    "product_name" : "Red Hat Hardened Images",
    "release_date" : "2026-08-05T00:00:00Z",
    "advisory" : "RHSA-2026:50826",
    "cpe" : "cpe:/a:redhat:hummingbird:1",
    "package" : "grafana13-1-main-13.1.1-0.5.2.hum1"
  }, {
    "product_name" : "Red Hat Hardened Images",
    "release_date" : "2026-08-05T00:00:00Z",
    "advisory" : "RHSA-2026:50854",
    "cpe" : "cpe:/a:redhat:hummingbird:1",
    "package" : "grafana12-4-main-12.4.6-0.4.1.hum1"
  }, {
    "product_name" : "Red Hat Hardened Images",
    "release_date" : "2026-08-06T00:00:00Z",
    "advisory" : "RHSA-2026:50956",
    "cpe" : "cpe:/a:redhat:hummingbird:1",
    "package" : "grafana13-1-main-13.1.2-0.1.hum1"
  }, {
    "product_name" : "Red Hat Hardened Images",
    "release_date" : "2026-08-06T00:00:00Z",
    "advisory" : "RHSA-2026:50969",
    "cpe" : "cpe:/a:redhat:hummingbird:1",
    "package" : "grafana12-4-main-12.4.7-0.1.hum1"
  }, {
    "product_name" : "Red Hat OpenShift AI 2.25",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65126",
    "cpe" : "cpe:/a:redhat:openshift_ai:2.25::el9",
    "package" : "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9:1787801527"
  }, {
    "product_name" : "Red Hat OpenShift AI 3.4",
    "release_date" : "2026-08-27T00:00:00Z",
    "advisory" : "RHSA-2026:60520",
    "cpe" : "cpe:/a:redhat:openshift_ai:3.4::el9",
    "package" : "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9:1787121387"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.20",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:63103",
    "cpe" : "cpe:/a:redhat:openshift:4.20::el9",
    "package" : "openshift4/ose-agent-installer-ui-rhel9:1788335236"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.22",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:63096",
    "cpe" : "cpe:/a:redhat:openshift:4.22::el9",
    "package" : "openshift4/ose-agent-installer-ui-rhel9:1788314963"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.0",
    "release_date" : "2026-08-25T00:00:00Z",
    "advisory" : "RHSA-2026:59548",
    "cpe" : "cpe:/a:redhat:service_mesh:3.0::el9",
    "package" : "openshift-service-mesh/kiali-ossmc-rhel9:1787077028"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.0",
    "release_date" : "2026-08-25T00:00:00Z",
    "advisory" : "RHSA-2026:59548",
    "cpe" : "cpe:/a:redhat:service_mesh:3.0::el9",
    "package" : "openshift-service-mesh/kiali-rhel9:1787076495"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.1",
    "release_date" : "2026-08-25T00:00:00Z",
    "advisory" : "RHSA-2026:59561",
    "cpe" : "cpe:/a:redhat:service_mesh:3.1::el9",
    "package" : "openshift-service-mesh/kiali-ossmc-rhel9:1787075730"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.1",
    "release_date" : "2026-08-25T00:00:00Z",
    "advisory" : "RHSA-2026:59561",
    "cpe" : "cpe:/a:redhat:service_mesh:3.1::el9",
    "package" : "openshift-service-mesh/kiali-rhel9:1787092198"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.2",
    "release_date" : "2026-08-25T00:00:00Z",
    "advisory" : "RHSA-2026:59554",
    "cpe" : "cpe:/a:redhat:service_mesh:3.2::el9",
    "package" : "openshift-service-mesh/kiali-ossmc-rhel9:1787077188"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.2",
    "release_date" : "2026-08-25T00:00:00Z",
    "advisory" : "RHSA-2026:59554",
    "cpe" : "cpe:/a:redhat:service_mesh:3.2::el9",
    "package" : "openshift-service-mesh/kiali-rhel9:1787092255"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.3",
    "release_date" : "2026-08-25T00:00:00Z",
    "advisory" : "RHSA-2026:59566",
    "cpe" : "cpe:/a:redhat:service_mesh:3.3::el9",
    "package" : "openshift-service-mesh/kiali-ossmc-rhel9:1787076322"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.3",
    "release_date" : "2026-08-25T00:00:00Z",
    "advisory" : "RHSA-2026:59566",
    "cpe" : "cpe:/a:redhat:service_mesh:3.3::el9",
    "package" : "openshift-service-mesh/kiali-rhel9:1787077108"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.4",
    "release_date" : "2026-08-25T00:00:00Z",
    "advisory" : "RHSA-2026:59583",
    "cpe" : "cpe:/a:redhat:service_mesh:3.4::el9",
    "package" : "openshift-service-mesh/kiali-ossmc-rhel9:1787166293"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.4",
    "release_date" : "2026-08-25T00:00:00Z",
    "advisory" : "RHSA-2026:59583",
    "cpe" : "cpe:/a:redhat:service_mesh:3.4::el9",
    "package" : "openshift-service-mesh/kiali-rhel9:1787165683"
  }, {
    "product_name" : "Red Hat Satellite 6.18",
    "release_date" : "2026-09-03T00:00:00Z",
    "advisory" : "RHSA-2026:63371",
    "cpe" : "cpe:/a:redhat:satellite:6.18::el9",
    "package" : "satellite/iop-remediations-rhel9:1788230538"
  }, {
    "product_name" : "Red Hat Satellite 6.19",
    "release_date" : "2026-09-03T00:00:00Z",
    "advisory" : "RHSA-2026:63357",
    "cpe" : "cpe:/a:redhat:satellite:6.19::el9",
    "package" : "satellite/iop-remediations-rhel9:1788253940"
  } ],
  "package_state" : [ {
    "product_name" : "Cryostat 4",
    "fix_state" : "Affected",
    "package_name" : "cryostat/cryostat-openshift-console-plugin-rhel9",
    "cpe" : "cpe:/a:redhat:cryostat:4"
  }, {
    "product_name" : "Cryostat 4",
    "fix_state" : "Not affected",
    "package_name" : "cryostat-openshift-console-plugin-npm",
    "cpe" : "cpe:/a:redhat:cryostat:4"
  }, {
    "product_name" : "Cryostat 4",
    "fix_state" : "Not affected",
    "package_name" : "grafana-infinity-datasource-npm",
    "cpe" : "cpe:/a:redhat:cryostat:4"
  }, {
    "product_name" : "Exploit Intelligence",
    "fix_state" : "Affected",
    "package_name" : "exploit-intelligence-tech-preview/vulnerability-analysis-rhel9",
    "cpe" : "cpe:/a:redhat:exploit_intelligence:0"
  }, {
    "product_name" : "Migration Toolkit for Applications 8",
    "fix_state" : "Not affected",
    "package_name" : "mta/mta-cli-rhel9",
    "cpe" : "cpe:/a:redhat:migration_toolkit_applications:8"
  }, {
    "product_name" : "Migration Toolkit for Applications 8",
    "fix_state" : "Not affected",
    "package_name" : "mta/mta-generic-external-provider-rhel9",
    "cpe" : "cpe:/a:redhat:migration_toolkit_applications:8"
  }, {
    "product_name" : "Migration Toolkit for Containers",
    "fix_state" : "Affected",
    "package_name" : "rhmtc/openshift-migration-ui-rhel8",
    "cpe" : "cpe:/a:redhat:rhmt:1"
  }, {
    "product_name" : "OpenShift Pipelines",
    "fix_state" : "Not affected",
    "package_name" : "openshift-pipelines/pipelines-console-plugin-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_pipelines:1"
  }, {
    "product_name" : "Red Hat AMQ Broker 7",
    "fix_state" : "Not affected",
    "package_name" : "amq-broker-bin.zip",
    "cpe" : "cpe:/a:redhat:amq_broker:7"
  }, {
    "product_name" : "Red Hat AMQ Broker 7",
    "fix_state" : "Not affected",
    "package_name" : "amq-broker-maven-repository.zip",
    "cpe" : "cpe:/a:redhat:amq_broker:7"
  }, {
    "product_name" : "Red Hat AMQ Broker 7",
    "fix_state" : "Affected",
    "package_name" : "ip-address",
    "cpe" : "cpe:/a:redhat:amq_broker:7"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Affected",
    "package_name" : "ansible-automation-platform-27/mcp-server-rhel9",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Affected",
    "package_name" : "ansible-automation-platform-tech-preview/mcp-server-rhel9",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat build of Apache Camel for Spring Boot 4",
    "fix_state" : "Not affected",
    "package_name" : "ip-address",
    "cpe" : "cpe:/a:redhat:camel_spring_boot:4"
  }, {
    "product_name" : "Red Hat build of Apache Camel for Spring Boot 4",
    "fix_state" : "Not affected",
    "package_name" : "rhaf-camel-for-springboot-maven-repository.zip",
    "cpe" : "cpe:/a:redhat:camel_spring_boot:4"
  }, {
    "product_name" : "Red Hat build of Apache Camel for Spring Boot 4",
    "fix_state" : "Not affected",
    "package_name" : "rhaf-camel-maven-repository.zip",
    "cpe" : "cpe:/a:redhat:camel_spring_boot:4"
  }, {
    "product_name" : "Red Hat build of Apache Camel for Spring Boot 4",
    "fix_state" : "Not affected",
    "package_name" : "rhaf-camel-spring-boot-maven-repository.zip",
    "cpe" : "cpe:/a:redhat:camel_spring_boot:4"
  }, {
    "product_name" : "Red Hat build of Apache Camel - HawtIO 4",
    "fix_state" : "Affected",
    "package_name" : "ip-address",
    "cpe" : "cpe:/a:redhat:apache_camel_hawtio:4"
  }, {
    "product_name" : "Red Hat Build of Podman Desktop",
    "fix_state" : "Affected",
    "package_name" : "rh-podman-desktop.git",
    "cpe" : "cpe:/a:redhat:podman_desktop:1"
  }, {
    "product_name" : "Red Hat Connectivity Link 1",
    "fix_state" : "Affected",
    "package_name" : "rhcl-1/rhcl-console-plugin-rhel9",
    "cpe" : "cpe:/a:redhat:connectivity_link:1"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Not affected",
    "package_name" : "rust",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Not affected",
    "package_name" : "rust",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux AI (RHEL AI) 3",
    "fix_state" : "Affected",
    "package_name" : "rhelai3/bootc-cuda-rhel9",
    "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3"
  }, {
    "product_name" : "Red Hat Enterprise Linux AI (RHEL AI) 3",
    "fix_state" : "Affected",
    "package_name" : "rhelai3/bootc-gaudi-rhel9",
    "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3"
  }, {
    "product_name" : "Red Hat Enterprise Linux AI (RHEL AI) 3",
    "fix_state" : "Affected",
    "package_name" : "rhelai3/bootc-rocm-rhel9",
    "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3"
  }, {
    "product_name" : "Red Hat Enterprise Linux AI (RHEL AI) 3",
    "fix_state" : "Affected",
    "package_name" : "rhelai3/disk-image-cuda-rhel9",
    "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3"
  }, {
    "product_name" : "Red Hat Enterprise Linux AI (RHEL AI) 3",
    "fix_state" : "Affected",
    "package_name" : "rust",
    "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3"
  }, {
    "product_name" : "Red Hat Hardened Images",
    "fix_state" : "Not affected",
    "package_name" : "rust",
    "cpe" : "cpe:/a:redhat:hummingbird:1"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-console",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-console-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4",
    "fix_state" : "Not affected",
    "package_name" : "odf4/ocs-client-console-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4",
    "fix_state" : "Not affected",
    "package_name" : "odf4/odf-console-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4",
    "fix_state" : "Not affected",
    "package_name" : "odf4/odf-multicluster-console-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4"
  }, {
    "product_name" : "Red Hat OpenShift Dev Spaces",
    "fix_state" : "Affected",
    "package_name" : "devspaces/code-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_devspaces:3"
  }, {
    "product_name" : "Red Hat OpenShift Dev Spaces",
    "fix_state" : "Affected",
    "package_name" : "devspaces/dashboard-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_devspaces:3"
  }, {
    "product_name" : "Red Hat OpenShift Dev Spaces",
    "fix_state" : "Affected",
    "package_name" : "devspaces/openvsx-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_devspaces:3"
  }, {
    "product_name" : "Red Hat OpenShift Dev Spaces",
    "fix_state" : "Not affected",
    "package_name" : "devspaces/pluginregistry-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_devspaces:3"
  }, {
    "product_name" : "Red Hat OpenShift Dev Spaces",
    "fix_state" : "Affected",
    "package_name" : "devspaces/udi-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_devspaces:3"
  }, {
    "product_name" : "Self-service automation portal 2",
    "fix_state" : "Affected",
    "package_name" : "ansible-automation-platform/bootc-automation-portal-rhel9",
    "cpe" : "cpe:/a:redhat:ansible_portal:2"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2026-69192\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-69192\nhttps://github.com/beaugunderson/ip-address/commit/56368cb3d66c73ba0ee9b6b834fd31b22c2fd71e\nhttps://github.com/beaugunderson/ip-address/releases/tag/v10.3.1\nhttps://github.com/beaugunderson/ip-address/security/advisories/GHSA-mwp4-54f8-5fhr" ],
  "name" : "CVE-2026-69192",
  "mitigation" : {
    "value" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
    "lang" : "en:us"
  },
  "csaw" : false
}