{"api_version":"1","generated_at":"2026-09-12T23:02:35+00:00","cve":"CVE-2026-42499","urls":{"html":"https://cve.report/CVE-2026-42499","api":"https://cve.report/api/cve/CVE-2026-42499.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-42499","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-42499"},"summary":{"title":"Quadratic string concatenation in consumePhrase in net/mail","description":"Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.","state":"PUBLISHED","assigner":"Go","published_at":"2026-05-07 20:16:44","updated_at":"2026-09-11 13:17:59"},"problem_types":["NVD-CWE-noinfo","CWE-1046","CWE-407: Inefficient Algorithmic Complexity","CWE-1046 Creation of Immutable Text Using String Concatenation"],"metrics":[{"version":"3.1","source":"ADP","type":"DECLARED","score":"7.5","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","data":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}},{"version":"3.1","source":"ADP","type":"CVSS","score":"7.5","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","data":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}},{"version":"3.1","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","score":"7.5","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"}},{"version":"3.1","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","type":"Secondary","score":"7.5","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"}}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:57194","name":"https://access.redhat.com/errata/RHSA-2026:57194","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:59467","name":"https://access.redhat.com/errata/RHSA-2026:59467","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:56910","name":"https://access.redhat.com/errata/RHSA-2026:56910","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:36797","name":"https://access.redhat.com/errata/RHSA-2026:36797","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:54284","name":"https://access.redhat.com/errata/RHSA-2026:54284","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:41928","name":"https://access.redhat.com/errata/RHSA-2026:41928","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:43038","name":"https://access.redhat.com/errata/RHSA-2026:43038","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:59830","name":"https://access.redhat.com/errata/RHSA-2026:59830","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:41031","name":"https://access.redhat.com/errata/RHSA-2026:41031","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:50300","name":"https://access.redhat.com/errata/RHSA-2026:50300","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:43692","name":"https://access.redhat.com/errata/RHSA-2026:43692","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:65116","name":"https://access.redhat.com/errata/RHSA-2026:65116","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:54531","name":"https://access.redhat.com/errata/RHSA-2026:54531","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:62406","name":"https://access.redhat.com/errata/RHSA-2026:62406","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:62753","name":"https://access.redhat.com/errata/RHSA-2026:62753","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:54274","name":"https://access.redhat.com/errata/RHSA-2026:54274","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:63163","name":"https://access.redhat.com/errata/RHSA-2026:63163","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:49702","name":"https://access.redhat.com/errata/RHSA-2026:49702","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:47952","name":"https://access.redhat.com/errata/RHSA-2026:47952","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:57649","name":"https://access.redhat.com/errata/RHSA-2026:57649","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:66327","name":"https://access.redhat.com/errata/RHSA-2026:66327","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:60023","name":"https://access.redhat.com/errata/RHSA-2026:60023","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:60018","name":"https://access.redhat.com/errata/RHSA-2026:60018","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:42644","name":"https://access.redhat.com/errata/RHSA-2026:42644","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:36754","name":"https://access.redhat.com/errata/RHSA-2026:36754","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://go.dev/issue/78987","name":"https://go.dev/issue/78987","refsource":"security@golang.org","tags":["Issue Tracking"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:65336","name":"https://access.redhat.com/errata/RHSA-2026:65336","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:56785","name":"https://access.redhat.com/errata/RHSA-2026:56785","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:62754","name":"https://access.redhat.com/errata/RHSA-2026:62754","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:65895","name":"https://access.redhat.com/errata/RHSA-2026:65895","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://go.dev/cl/771520","name":"https://go.dev/cl/771520","refsource":"security@golang.org","tags":["Patch"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:56854","name":"https://access.redhat.com/errata/RHSA-2026:56854","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:63636","name":"https://access.redhat.com/errata/RHSA-2026:63636","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:54286","name":"https://access.redhat.com/errata/RHSA-2026:54286","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:49712","name":"https://access.redhat.com/errata/RHSA-2026:49712","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:54283","name":"https://access.redhat.com/errata/RHSA-2026:54283","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:22120","name":"https://access.redhat.com/errata/RHSA-2026:22120","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:43052","name":"https://access.redhat.com/errata/RHSA-2026:43052","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:64818","name":"https://access.redhat.com/errata/RHSA-2026:64818","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:56912","name":"https://access.redhat.com/errata/RHSA-2026:56912","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:62260","name":"https://access.redhat.com/errata/RHSA-2026:62260","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:34364","name":"https://access.redhat.com/errata/RHSA-2026:34364","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:33123","name":"https://access.redhat.com/errata/RHSA-2026:33123","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:63022","name":"https://access.redhat.com/errata/RHSA-2026:63022","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:50843","name":"https://access.redhat.com/errata/RHSA-2026:50843","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:57914","name":"https://access.redhat.com/errata/RHSA-2026:57914","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/security/cve/CVE-2026-42499","name":"https://access.redhat.com/security/cve/CVE-2026-42499","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:54555","name":"https://access.redhat.com/errata/RHSA-2026:54555","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:54583","name":"https://access.redhat.com/errata/RHSA-2026:54583","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:51033","name":"https://access.redhat.com/errata/RHSA-2026:51033","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:36319","name":"https://access.redhat.com/errata/RHSA-2026:36319","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://pkg.go.dev/vuln/GO-2026-4977","name":"https://pkg.go.dev/vuln/GO-2026-4977","refsource":"security@golang.org","tags":["Vendor Advisory"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:57845","name":"https://access.redhat.com/errata/RHSA-2026:57845","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:40262","name":"https://access.redhat.com/errata/RHSA-2026:40262","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:63332","name":"https://access.redhat.com/errata/RHSA-2026:63332","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:66022","name":"https://access.redhat.com/errata/RHSA-2026:66022","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:65534","name":"https://access.redhat.com/errata/RHSA-2026:65534","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:59833","name":"https://access.redhat.com/errata/RHSA-2026:59833","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:51112","name":"https://access.redhat.com/errata/RHSA-2026:51112","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:17713","name":"https://access.redhat.com/errata/RHSA-2026:17713","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:65886","name":"https://access.redhat.com/errata/RHSA-2026:65886","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:54287","name":"https://access.redhat.com/errata/RHSA-2026:54287","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:22121","name":"https://access.redhat.com/errata/RHSA-2026:22121","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:33120","name":"https://access.redhat.com/errata/RHSA-2026:33120","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://groups.google.com/g/golang-announce/c/qcCIEXso47M","name":"https://groups.google.com/g/golang-announce/c/qcCIEXso47M","refsource":"security@golang.org","tags":["Release Notes"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:65117","name":"https://access.redhat.com/errata/RHSA-2026:65117","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:42146","name":"https://access.redhat.com/errata/RHSA-2026:42146","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:36625","name":"https://access.redhat.com/errata/RHSA-2026:36625","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:57487","name":"https://access.redhat.com/errata/RHSA-2026:57487","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:33142","name":"https://access.redhat.com/errata/RHSA-2026:33142","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:54285","name":"https://access.redhat.com/errata/RHSA-2026:54285","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:57482","name":"https://access.redhat.com/errata/RHSA-2026:57482","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:22112","name":"https://access.redhat.com/errata/RHSA-2026:22112","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:17714","name":"https://access.redhat.com/errata/RHSA-2026:17714","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:60520","name":"https://access.redhat.com/errata/RHSA-2026:60520","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:41066","name":"https://access.redhat.com/errata/RHSA-2026:41066","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:61253","name":"https://access.redhat.com/errata/RHSA-2026:61253","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:54602","name":"https://access.redhat.com/errata/RHSA-2026:54602","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:54552","name":"https://access.redhat.com/errata/RHSA-2026:54552","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42499.json","name":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42499.json","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:56852","name":"https://access.redhat.com/errata/RHSA-2026:56852","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467809","name":"https://bugzilla.redhat.com/show_bug.cgi?id=2467809","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:62803","name":"https://access.redhat.com/errata/RHSA-2026:62803","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:33150","name":"https://access.redhat.com/errata/RHSA-2026:33150","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:56789","name":"https://access.redhat.com/errata/RHSA-2026:56789","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:42796","name":"https://access.redhat.com/errata/RHSA-2026:42796","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:62407","name":"https://access.redhat.com/errata/RHSA-2026:62407","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:65153","name":"https://access.redhat.com/errata/RHSA-2026:65153","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:56340","name":"https://access.redhat.com/errata/RHSA-2026:56340","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:33574","name":"https://access.redhat.com/errata/RHSA-2026:33574","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:65335","name":"https://access.redhat.com/errata/RHSA-2026:65335","refsource":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42499","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42499","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Go standard library","product":"net/mail","version":"affected 1.25.10 semver","platforms":[]},{"source":"CNA","vendor":"Go standard library","product":"net/mail","version":"affected 1.26.0-0 1.26.3 semver","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","version":"unaffected 0:1.26.3-4.el10_2 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","version":"unaffected 0:10.2.6-28.el10_2.5 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","version":"unaffected 2:1.43.1-5.el10_2 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","version":"unaffected 2:1.22.2-5.el10_2 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","version":"unaffected 0:0.152.1-2.el10_2 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","version":"unaffected 0:52.1-1.el10_2.2 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","version":"unaffected 0:165.1-3.el10_2.2 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","version":"unaffected 0:1.26.5-1.el10_0 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","version":"unaffected 0:2.21.0-3.el10_0.4 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","version":"unaffected 0:134.1-12.el10_0 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","version":"unaffected 8100020260518131104.a3795dee * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","version":"unaffected 0:9.2.10-33.el8_10 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","version":"unaffected 8100020260901110702.afee755d * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","version":"unaffected 0:1.26.3-1.el9_8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","version":"unaffected 0:10.2.6-23.el9_8.3 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","version":"unaffected 0:0.152.1-2.el9_8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","version":"unaffected 0:165.1-4.el9_8.1 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","version":"unaffected 0:52.1-1.el9_8.2 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","version":"unaffected 0:1.26.5-1.el9_2 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","version":"unaffected 0:76.1-9.el9_2 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","version":"unaffected 0:1.26.5-1.el9_4 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","version":"unaffected 0:101.3-4.el9_4.6 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","version":"unaffected 0:1.26.5-1.el9_6 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","version":"unaffected 0:10.2.6-22.el9_6 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","version":"unaffected 0:132.2-12.el9_6 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","version":"unaffected 0:2.21.0-7.el9_6.1 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.12","version":"unaffected 0:1.25.5-34.rhaos4.12.git6120b13.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.12","version":"unaffected 0:4.12.0-202608131627.p2.g0e18cfc.assembly.stream.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.14","version":"unaffected 0:1.27.8-19.rhaos4.14.gitcea2db1.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.14","version":"unaffected 0:4.14.0-202608131802.p2.g9a7820e.assembly.stream.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.15","version":"unaffected 0:1.28.11-14.rhaos4.15.gitf722b2f.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.15","version":"unaffected 0:4.15.0-202608131733.p2.g5cb2ef4.assembly.stream.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.15","version":"unaffected 0:4.15.0-202608131733.p2.g8231637.assembly.stream.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.15","version":"unaffected 0:4.15.0-202608131733.p2.gfd77d92.assembly.stream.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.15","version":"unaffected 0:4.15.0-202608131733.p2.g5638728.assembly.stream.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.15","version":"unaffected 0:4.15.0-202608131733.p2.gfc50272.assembly.stream.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","version":"unaffected 0:1.29.13-12.rhaos4.16.git979a5e6.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","version":"unaffected 0:4.16.0-202608111505.p2.g41c4e9b.assembly.stream.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","version":"unaffected 0:4.16.0-202608111505.p2.g6f88b58.assembly.stream.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","version":"unaffected 0:4.16.0-202608111505.p2.ga53e9de.assembly.stream.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","version":"unaffected 0:4.16.0-202608111505.p2.ga3ebdc0.assembly.stream.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","version":"unaffected 0:4.16.0-202608111505.p2.g26b43df.assembly.stream.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","version":"unaffected 0:4.16.69-202608202336.p0.g763478c.assembly.4.16.69.el9 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.17","version":"unaffected 0:1.30.14-11.rhaos4.17.git1e2a16d.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.17","version":"unaffected 0:4.17.0-202608132055.p2.g4e295fa.assembly.stream.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.17","version":"unaffected 0:4.17.0-202608201812.p2.g7189593.assembly.stream.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.17","version":"unaffected 0:4.17.0-202608122146.p2.g144bace.assembly.stream.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.17","version":"unaffected 0:4.17.0-202608122146.p2.g5bcfbfd.assembly.stream.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.17","version":"unaffected 0:4.17.0-202608122146.p2.g8ce997d.assembly.stream.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","version":"unaffected 0:1.31.13-11.rhaos4.18.git817a650.el9 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","version":"unaffected 0:4.18.0-202608132034.p2.g91c2408.assembly.stream.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","version":"unaffected 0:4.18.0-202608132034.p2.g6febe61.assembly.stream.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","version":"unaffected 0:4.18.0-202608121933.p2.gc395190.assembly.stream.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","version":"unaffected 0:4.18.0-202608121933.p2.g9795abd.assembly.stream.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","version":"unaffected 0:4.18.0-202608121933.p2.g6ea2356.assembly.stream.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","version":"unaffected 0:4.18.54-202608211117.p0.g8eb6c29.assembly.4.18.54.el9 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.19","version":"unaffected 0:1.32.13-9.rhaos4.19.git2100f27.el9 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.19","version":"unaffected 0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.19","version":"unaffected 0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.19","version":"unaffected 0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.19","version":"unaffected 0:4.19.46-202609041024.p0.g59e34c7.assembly.4.19.46.el9 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.19","version":"unaffected 1786613805 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Logging for Red Hat OpenShift 6","version":"unaffected 1785419067 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Logging for Red Hat OpenShift 6.2","version":"unaffected 1784748010 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Logging Subsystem for Red Hat OpenShift 6.4","version":"unaffected 1782405469 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Logging Subsystem for Red Hat OpenShift 6.5","version":"unaffected 1786645248 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.11","version":"unaffected 1786911952 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.11","version":"unaffected 1786912006 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"OpenShift API for Data Protection 1.3","version":"unaffected 1785177357 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"OpenShift API for Data Protection 1.4","version":"unaffected 1786946116 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"OpenShift API for Data Protection 1.5","version":"unaffected 1788860461 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"OpenShift API for Data Protection 1.6","version":"unaffected 1784058822 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Advanced Cluster Security 4.9","version":"unaffected 1783357116 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Advanced Cluster Security for Kubernetes 4.10","version":"unaffected 1783357140 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Developer Hub 1.10","version":"unaffected 1783447707 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Developer Hub 1.9","version":"unaffected 1782767215 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Hardened Images","version":"unaffected 1.25.10-2.2.hum1 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Hardened Images","version":"unaffected 1.26.3-2.2.hum1 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Migration Toolkit 1.8","version":"unaffected 1783953372 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Migration Toolkit for Applications 8.1","version":"unaffected 1785171639 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Migration Toolkit for Applications 8.2","version":"unaffected 1784211378 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift AI 2.25","version":"unaffected 1783544461 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","version":"unaffected 1787102977 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","version":"unaffected 1786611759 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","version":"unaffected 1787562200 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.12","version":"unaffected 1786752886 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.14","version":"unaffected 1787002807 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.15","version":"unaffected 1787055135 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","version":"unaffected 1786788280 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.17","version":"unaffected 1787549445 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","version":"unaffected 1786754308 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.19","version":"unaffected 1786489910 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.20","version":"unaffected 1786494900 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.21","version":"unaffected 1786496647 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.21","version":"unaffected 1786573075 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Dev Spaces 3.30","version":"unaffected 1787756267 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Dev Spaces 3.30","version":"unaffected 1787756799 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Service Mesh 3.0","version":"unaffected 1782222217 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Service Mesh 3.0","version":"unaffected 1782223341 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Service Mesh 3.0","version":"unaffected 1782296193 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Service Mesh 3.0","version":"unaffected 1782222607 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Service Mesh 3.1","version":"unaffected 1782222163 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Service Mesh 3.1","version":"unaffected 1782223138 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Service Mesh 3.1","version":"unaffected 1782222394 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Service Mesh 3.1","version":"unaffected 1782222451 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Service Mesh 3.2","version":"unaffected 1782226178 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Service Mesh 3.2","version":"unaffected 1782224487 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Service Mesh 3.2","version":"unaffected 1782303211 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Service Mesh 3.2","version":"unaffected 1782224541 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Service Mesh 3.3","version":"unaffected 1782223045 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Service Mesh 3.3","version":"unaffected 1782222366 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Service Mesh 3.3","version":"unaffected 1782310747 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Service Mesh 3.3","version":"unaffected 1782222038 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Workload Availability 0.12","version":"unaffected 1785202723 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Workload Availability 0.13","version":"unaffected 1785203036 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Workload Availability 0.3","version":"unaffected 1785203474 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Workload Availability 0.7","version":"unaffected 1785203508 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Workload Availability 0.8","version":"unaffected 1785203079 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Workload Availability 5.7","version":"unaffected 1785202847 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Quay 3.10","version":"unaffected 1783750447 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Quay 3.12","version":"unaffected 1783751865 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Quay 3.12","version":"unaffected 1784353904 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Quay 3.15","version":"unaffected 1784351966 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Quay 3.16","version":"unaffected 1783955846 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Quay 3.9","version":"unaffected 1784125838 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Trusted Artifact Signer 1.4","version":"unaffected 4-1.4.2 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Trusted Artifact Signer 1.4","version":"unaffected 4-1.4.3 * rpm","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Assisted Installer for Red Hat OpenShift Container Platform 2","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Confidential Compute Attestation","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Confidential Compute Attestation","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Confidential Compute Attestation","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Cryostat 4","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Custom Metric Autoscaler operator for Red Hat Openshift","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"ExternalDNS Operator","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"ExternalDNS Operator","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"External Secrets Operator for Red Hat OpenShift","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"File Integrity Operator","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Gatekeeper 3","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Logical Volume Manager Storage","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Logical Volume Manager Storage","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Logical Volume Manager Storage","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Multiarch Tuning Operator","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Multicluster Engine for Kubernetes","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Multicluster Engine for Kubernetes","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Multicluster Engine for Kubernetes","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Multicluster Engine for Kubernetes","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Multicluster Engine for Kubernetes","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Multicluster Engine for Kubernetes","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Multicluster Engine for Kubernetes","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Multicluster Engine for Kubernetes","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Multicluster Engine for Kubernetes","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Multicluster Engine for Kubernetes","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Multicluster Engine for Kubernetes","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Multicluster Global Hub","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Multicluster Global Hub","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Network Observability Operator","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"OpenShift Developer Tools and Services","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"OpenShift Lightspeed","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"OpenShift Pipelines","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"OpenShift Serverless","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"OpenShift Service Mesh 2","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"OpenShift Service Mesh 2","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"OpenShift Service Mesh 3","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Power monitoring for Red Hat OpenShift","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Ceph Storage 5","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Ceph Storage 6","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Ceph Storage 9","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Certification Program for Red Hat Enterprise Linux 9","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Edge Manager 1","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Edge Manager 1","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Enterprise Linux AI (RHEL AI) 3","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Lightspeed for Runtimes Operator","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Cluster Manager CLI","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Dev Workspaces Operator","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift for Windows Containers","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift GitOps","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift GitOps","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Virtualization 4","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Virtualization 4","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Virtualization 4","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenShift Virtualization 4","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenStack Platform 16.2","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenStack Platform 17.1","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat OpenStack Platform 18.0","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Quay 3","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Satellite 6","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Service Interconnect 1","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Red Hat Service Interconnect 2","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Security Profiles Operator","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Zero Trust Workload Identity Manager","version":"","platforms":[]},{"source":"ADP","vendor":"Red Hat","product":"Zero Trust Workload Identity Manager - Tech Preview","version":"","platforms":[]}],"timeline":[{"source":"ADP","time":"2026-05-07T20:00:51.685Z","lang":"en","value":"Reported to Red Hat."},{"source":"ADP","time":"2026-05-07T19:41:18.615Z","lang":"en","value":"Made public."}],"solutions":[{"source":"ADP","title":"","value":"RHSA-2026:59830: Red Hat OpenShift Container Platform 4.12","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:56785: Red Hat OpenShift Container Platform 4.14","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:56910: Red Hat OpenShift Container Platform 4.15","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:56852: Red Hat OpenShift Container Platform 4.16","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:60018: Red Hat OpenShift Container Platform 4.17","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:57482: Red Hat OpenShift Container Platform 4.18","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:54552: Red Hat OpenShift Container Platform 4.19","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:57845: Red Hat OpenShift Container Platform 4.16","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:57914: Red Hat OpenShift Container Platform 4.18","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:63636: Red Hat OpenShift Container Platform 4.19","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:49702: Red Hat Enterprise Linux AppStream EUS (v. 10.0)","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:65335: Red Hat Enterprise Linux AppStream EUS (v. 10.0)","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:66327: Red Hat Enterprise Linux AppStream EUS (v. 10.0)","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:63332: Red Hat Enterprise Linux AppStream (v. 10)","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:22120: Red Hat Enterprise Linux AppStream (v. 10)","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:63022: Red Hat Enterprise Linux AppStream (v. 10)","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:65534: Red Hat Enterprise Linux AppStream (v. 10)","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:65116: Red Hat Enterprise Linux AppStream (v. 10)","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:65895: Red Hat Enterprise Linux AppStream (v. 10)","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:64818: Red Hat Enterprise Linux AppStream (v. 10)","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:63163: Red Hat Enterprise Linux AppStream (v. 8)","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:22112: Red Hat Enterprise Linux AppStream (v. 8)","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:62407: Red Hat Enterprise Linux AppStream (v. 8)","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:61253: Red Hat Enterprise Linux AppStream E4S (v.9.2)","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:62754: Red Hat Enterprise Linux AppStream E4S (v.9.2)","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:57649: Red Hat Enterprise Linux AppStream E4S (v.9.4)","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:62753: Red Hat Enterprise Linux AppStream E4S (v.9.4)","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:49712: Red Hat Enterprise Linux AppStream EUS (v.9.6)","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:51112: Red Hat Enterprise Linux AppStream EUS (v.9.6)","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:65336: Red Hat Enterprise Linux AppStream EUS (v.9.6)","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:62803: Red Hat Enterprise Linux AppStream EUS (v.9.6)","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:22121: Red Hat Enterprise Linux AppStream (v. 9)","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:62406: Red Hat Enterprise Linux AppStream (v. 9)","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:65886: Red Hat Enterprise Linux AppStream (v. 9)","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:65117: Red Hat Enterprise Linux AppStream (v. 9)","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:65153: Red Hat Enterprise Linux AppStream (v. 9)","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:34364: Logging Subsystem for Red Hat OpenShift 6.4","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:56340: Logging Subsystem for Red Hat OpenShift 6.5","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:47952: Logging for Red Hat OpenShift 6.2","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:50843: Logging for Red Hat OpenShift 6","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:51033: OpenShift API for Data Protection 1.3","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:59467: OpenShift API for Data Protection 1.4","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:66022: OpenShift API for Data Protection 1.5","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:43692: OpenShift API for Data Protection 1.6","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:36319: Red Hat Advanced Cluster Security 4.9","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:36625: Red Hat Advanced Cluster Security for Kubernetes 4.10","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:36754: Red Hat Developer Hub 1.10","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:33574: Red Hat Developer Hub 1.9","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:17713: Red Hat Hardened Images","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:17714: Red Hat Hardened Images","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:41928: Red Hat Migration Toolkit 1.8","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:42644: Red Hat OpenShift AI 2.25","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:60520: Red Hat OpenShift AI 3.4","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:59833: Red Hat OpenShift Container Platform 4.12","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:56789: Red Hat OpenShift Container Platform 4.14","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:56912: Red Hat OpenShift Container Platform 4.15","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:56854: Red Hat OpenShift Container Platform 4.16","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:60023: Red Hat OpenShift Container Platform 4.17","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:57487: Red Hat OpenShift Container Platform 4.18","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:54555: Red Hat OpenShift Container Platform 4.19","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:54583: Red Hat OpenShift Container Platform 4.20","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:54602: Red Hat OpenShift Container Platform 4.21","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:62260: Red Hat OpenShift Dev Spaces 3.30","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:33120: Red Hat OpenShift Service Mesh 3.0","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:33123: Red Hat OpenShift Service Mesh 3.1","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:33142: Red Hat OpenShift Service Mesh 3.2","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:33150: Red Hat OpenShift Service Mesh 3.3","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:54287: Red Hat OpenShift Workload Availability 0.12","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:54284: Red Hat OpenShift Workload Availability 0.13","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:54286: Red Hat OpenShift Workload Availability 0.3","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:54285: Red Hat OpenShift Workload Availability 0.7","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:54274: Red Hat OpenShift Workload Availability 0.8","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:54283: Red Hat OpenShift Workload Availability 5.7","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:41031: Red Hat Quay 3.10","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:42146: Red Hat Quay 3.12","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:43052: Red Hat Quay 3.12","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:42796: Red Hat Quay 3.15","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:41066: Red Hat Quay 3.16","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:40262: Red Hat Quay 3.9","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4","time":"","lang":"en"},{"source":"ADP","title":"","value":"RHSA-2026:57194: multicluster engine for Kubernetes 2.11","time":"","lang":"en"}],"workarounds":[{"source":"ADP","title":"","value":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.","time":"","lang":"en"}],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2026","cve_id":"42499","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"golang","cpe5":"go","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2026","cve_id":"42499","cve":"CVE-2026-42499","epss":"0.000230000","percentile":"0.065470000","score_date":"2026-05-12","updated_at":"2026-05-13 00:11:54"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}},{"other":{"content":{"id":"CVE-2026-42499","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-05-08T16:55:28.873015Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-05-08T21:29:59.662Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"},{"affected":[{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"defaultStatus":"affected","packageName":"golang","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.26.3-4.el10_2","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"defaultStatus":"affected","packageName":"grafana","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:10.2.6-28.el10_2.5","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"defaultStatus":"affected","packageName":"buildah","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"2:1.43.1-5.el10_2","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"defaultStatus":"affected","packageName":"skopeo","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"2:1.22.2-5.el10_2","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"defaultStatus":"affected","packageName":"opentelemetry-collector","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:0.152.1-2.el10_2","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"defaultStatus":"affected","packageName":"image-builder","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:52.1-1.el10_2.2","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"defaultStatus":"affected","packageName":"osbuild-composer","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:165.1-3.el10_2.2","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"defaultStatus":"affected","packageName":"golang","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.26.5-1.el10_0","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"defaultStatus":"affected","packageName":"ignition","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.21.0-3.el10_0.4","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"defaultStatus":"affected","packageName":"osbuild-composer","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:134.1-12.el10_0","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"go-toolset:rhel8","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8100020260518131104.a3795dee","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"grafana","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:9.2.10-33.el8_10","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"container-tools:rhel8","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8100020260901110702.afee755d","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"golang","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.26.3-1.el9_8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"grafana","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:10.2.6-23.el9_8.3","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"opentelemetry-collector","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:0.152.1-2.el9_8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"osbuild-composer","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:165.1-4.el9_8.1","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"image-builder","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:52.1-1.el9_8.2","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:9.2"],"defaultStatus":"affected","packageName":"golang","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.26.5-1.el9_2","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:9.2"],"defaultStatus":"affected","packageName":"osbuild-composer","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:76.1-9.el9_2","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:9.4"],"defaultStatus":"affected","packageName":"golang","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.26.5-1.el9_4","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:9.4"],"defaultStatus":"affected","packageName":"osbuild-composer","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:101.3-4.el9_4.6","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.6"],"defaultStatus":"affected","packageName":"golang","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.26.5-1.el9_6","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.6"],"defaultStatus":"affected","packageName":"grafana","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:10.2.6-22.el9_6","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.6"],"defaultStatus":"affected","packageName":"osbuild-composer","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:132.2-12.el9_6","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.6"],"defaultStatus":"affected","packageName":"ignition","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.21.0-7.el9_6.1","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.12::el8"],"defaultStatus":"affected","packageName":"cri-o","product":"Red Hat OpenShift Container Platform 4.12","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.25.5-34.rhaos4.12.git6120b13.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.12::el8"],"defaultStatus":"affected","packageName":"openshift","product":"Red Hat OpenShift Container Platform 4.12","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.12.0-202608131627.p2.g0e18cfc.assembly.stream.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.14::el8"],"defaultStatus":"affected","packageName":"cri-o","product":"Red Hat OpenShift Container Platform 4.14","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.27.8-19.rhaos4.14.gitcea2db1.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.14::el8"],"defaultStatus":"affected","packageName":"ose-aws-ecr-image-credential-provider","product":"Red Hat OpenShift Container Platform 4.14","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.14.0-202608131802.p2.g9a7820e.assembly.stream.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.15::el8"],"defaultStatus":"affected","packageName":"cri-o","product":"Red Hat OpenShift Container Platform 4.15","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.28.11-14.rhaos4.15.gitf722b2f.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.15::el8"],"defaultStatus":"affected","packageName":"openshift","product":"Red Hat OpenShift Container Platform 4.15","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.15.0-202608131733.p2.g5cb2ef4.assembly.stream.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.15::el8"],"defaultStatus":"affected","packageName":"openshift-clients","product":"Red Hat OpenShift Container Platform 4.15","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.15.0-202608131733.p2.g8231637.assembly.stream.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.15::el8"],"defaultStatus":"affected","packageName":"ose-aws-ecr-image-credential-provider","product":"Red Hat OpenShift Container Platform 4.15","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.15.0-202608131733.p2.gfd77d92.assembly.stream.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.15::el8"],"defaultStatus":"affected","packageName":"ose-azure-acr-image-credential-provider","product":"Red Hat OpenShift Container Platform 4.15","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.15.0-202608131733.p2.g5638728.assembly.stream.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.15::el8"],"defaultStatus":"affected","packageName":"ose-gcp-gcr-image-credential-provider","product":"Red Hat OpenShift Container Platform 4.15","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.15.0-202608131733.p2.gfc50272.assembly.stream.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.16::el8"],"defaultStatus":"affected","packageName":"cri-o","product":"Red Hat OpenShift Container Platform 4.16","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.29.13-12.rhaos4.16.git979a5e6.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.16::el8"],"defaultStatus":"affected","packageName":"openshift","product":"Red Hat OpenShift Container Platform 4.16","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.16.0-202608111505.p2.g41c4e9b.assembly.stream.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.16::el8"],"defaultStatus":"affected","packageName":"openshift-clients","product":"Red Hat OpenShift Container Platform 4.16","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.16.0-202608111505.p2.g6f88b58.assembly.stream.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.16::el8"],"defaultStatus":"affected","packageName":"ose-aws-ecr-image-credential-provider","product":"Red Hat OpenShift Container Platform 4.16","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.16.0-202608111505.p2.ga53e9de.assembly.stream.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.16::el8"],"defaultStatus":"affected","packageName":"ose-azure-acr-image-credential-provider","product":"Red Hat OpenShift Container Platform 4.16","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.16.0-202608111505.p2.ga3ebdc0.assembly.stream.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.16::el8"],"defaultStatus":"affected","packageName":"ose-gcp-gcr-image-credential-provider","product":"Red Hat OpenShift Container Platform 4.16","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.16.0-202608111505.p2.g26b43df.assembly.stream.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.16::el9"],"defaultStatus":"affected","packageName":"microshift","product":"Red Hat OpenShift Container Platform 4.16","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.16.69-202608202336.p0.g763478c.assembly.4.16.69.el9","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.17::el8"],"defaultStatus":"affected","packageName":"cri-o","product":"Red Hat OpenShift Container Platform 4.17","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.30.14-11.rhaos4.17.git1e2a16d.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.17::el8"],"defaultStatus":"affected","packageName":"openshift","product":"Red Hat OpenShift Container Platform 4.17","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.17.0-202608132055.p2.g4e295fa.assembly.stream.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.17::el8"],"defaultStatus":"affected","packageName":"openshift-clients","product":"Red Hat OpenShift Container Platform 4.17","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.17.0-202608201812.p2.g7189593.assembly.stream.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.17::el8"],"defaultStatus":"affected","packageName":"ose-aws-ecr-image-credential-provider","product":"Red Hat OpenShift Container Platform 4.17","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.17.0-202608122146.p2.g144bace.assembly.stream.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.17::el8"],"defaultStatus":"affected","packageName":"ose-azure-acr-image-credential-provider","product":"Red Hat OpenShift Container Platform 4.17","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.17.0-202608122146.p2.g5bcfbfd.assembly.stream.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.17::el8"],"defaultStatus":"affected","packageName":"ose-gcp-gcr-image-credential-provider","product":"Red Hat OpenShift Container Platform 4.17","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.17.0-202608122146.p2.g8ce997d.assembly.stream.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.18::el8"],"defaultStatus":"affected","packageName":"cri-o","product":"Red Hat OpenShift Container Platform 4.18","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.31.13-11.rhaos4.18.git817a650.el9","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.18::el8"],"defaultStatus":"affected","packageName":"openshift","product":"Red Hat OpenShift Container Platform 4.18","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.18.0-202608132034.p2.g91c2408.assembly.stream.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.18::el8"],"defaultStatus":"affected","packageName":"openshift-clients","product":"Red Hat OpenShift Container Platform 4.18","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.18.0-202608132034.p2.g6febe61.assembly.stream.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.18::el8"],"defaultStatus":"affected","packageName":"ose-aws-ecr-image-credential-provider","product":"Red Hat OpenShift Container Platform 4.18","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.18.0-202608121933.p2.gc395190.assembly.stream.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.18::el8"],"defaultStatus":"affected","packageName":"ose-azure-acr-image-credential-provider","product":"Red Hat OpenShift Container Platform 4.18","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.18.0-202608121933.p2.g9795abd.assembly.stream.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.18::el8"],"defaultStatus":"affected","packageName":"ose-gcp-gcr-image-credential-provider","product":"Red Hat OpenShift Container Platform 4.18","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.18.0-202608121933.p2.g6ea2356.assembly.stream.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.18::el9"],"defaultStatus":"affected","packageName":"microshift","product":"Red Hat OpenShift Container Platform 4.18","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.18.54-202608211117.p0.g8eb6c29.assembly.4.18.54.el9","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.19::el8"],"defaultStatus":"affected","packageName":"cri-o","product":"Red Hat OpenShift Container Platform 4.19","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.32.13-9.rhaos4.19.git2100f27.el9","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.19::el8"],"defaultStatus":"affected","packageName":"openshift","product":"Red Hat OpenShift Container Platform 4.19","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.19::el8"],"defaultStatus":"affected","packageName":"openshift-clients","product":"Red Hat OpenShift Container Platform 4.19","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.19::el8"],"defaultStatus":"affected","packageName":"ose-aws-ecr-image-credential-provider","product":"Red Hat OpenShift Container Platform 4.19","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.19::el9"],"defaultStatus":"affected","packageName":"microshift","product":"Red Hat OpenShift Container Platform 4.19","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.19.46-202609041024.p0.g59e34c7.assembly.4.19.46.el9","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.19::el9"],"defaultStatus":"affected","packageName":"cert-manager/jetstack-cert-manager-rhel9","product":"Cert Manager support for Red Hat OpenShift release 1.19","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1786613805","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:6.0::el9"],"defaultStatus":"affected","packageName":"openshift-logging/logging-loki-rhel9","product":"Logging for Red Hat OpenShift 6","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1785419067","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:6.2::el9"],"defaultStatus":"affected","packageName":"openshift-logging/logging-loki-rhel9","product":"Logging for Red Hat OpenShift 6.2","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1784748010","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:6.4::el9"],"defaultStatus":"affected","packageName":"openshift-logging/logging-loki-rhel9","product":"Logging Subsystem for Red Hat OpenShift 6.4","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782405469","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:6.5::el9"],"defaultStatus":"affected","packageName":"openshift-logging/logging-loki-rhel9","product":"Logging Subsystem for Red Hat OpenShift 6.5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1786645248","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:multicluster_engine:2.11::el9"],"defaultStatus":"affected","packageName":"multicluster-engine/backplane-rhel9-operator","product":"multicluster engine for Kubernetes 2.11","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1786911952","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:multicluster_engine:2.11::el9"],"defaultStatus":"affected","packageName":"multicluster-engine/hypershift-addon-rhel9-operator","product":"multicluster engine for Kubernetes 2.11","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1786912006","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_api_data_protection:1.3::el9"],"defaultStatus":"affected","packageName":"oadp/oadp-velero-plugin-rhel9","product":"OpenShift API for Data Protection 1.3","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1785177357","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_api_data_protection:1.4::el9"],"defaultStatus":"affected","packageName":"oadp/oadp-velero-plugin-rhel9","product":"OpenShift API for Data Protection 1.4","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1786946116","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_api_data_protection:1.5::el9"],"defaultStatus":"affected","packageName":"oadp/oadp-velero-rhel9","product":"OpenShift API for Data Protection 1.5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1788860461","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_api_data_protection:1.6::el9"],"defaultStatus":"affected","packageName":"oadp/oadp-velero-rhel9","product":"OpenShift API for Data Protection 1.6","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1784058822","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:advanced_cluster_security:4.9::el8"],"defaultStatus":"affected","packageName":"advanced-cluster-security/rhacs-main-rhel8","product":"Red Hat Advanced Cluster Security 4.9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1783357116","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:advanced_cluster_security:4.10::el8"],"defaultStatus":"affected","packageName":"advanced-cluster-security/rhacs-main-rhel8","product":"Red Hat Advanced Cluster Security for Kubernetes 4.10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1783357140","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhdh:1.10::el9"],"defaultStatus":"affected","packageName":"rhdh/rhdh-rhel9-operator","product":"Red Hat Developer Hub 1.10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1783447707","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhdh:1.9::el9"],"defaultStatus":"affected","packageName":"rhdh/rhdh-rhel9-operator","product":"Red Hat Developer Hub 1.9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782767215","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:hummingbird:1"],"defaultStatus":"affected","packageName":"golang1-25-main","product":"Red Hat Hardened Images","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1.25.10-2.2.hum1","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:hummingbird:1"],"defaultStatus":"affected","packageName":"golang1-26-main","product":"Red Hat Hardened Images","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1.26.3-2.2.hum1","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhmt:1.8::el8"],"defaultStatus":"affected","packageName":"rhmtc/openshift-migration-controller-rhel8","product":"Red Hat Migration Toolkit 1.8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1783953372","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:migration_toolkit_applications:8.1::el9"],"defaultStatus":"affected","packageName":"mta/mta-cli-rhel9","product":"Red Hat Migration Toolkit for Applications 8.1","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1785171639","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:migration_toolkit_applications:8.2::el9"],"defaultStatus":"affected","packageName":"mta/mta-cli-rhel9","product":"Red Hat Migration Toolkit for Applications 8.2","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1784211378","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:2.25::el9"],"defaultStatus":"affected","packageName":"rhoai/odh-kueue-controller-rhel9","product":"Red Hat OpenShift AI 2.25","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1783544461","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"defaultStatus":"affected","packageName":"rhoai/odh-kube-auth-proxy-rhel9","product":"Red Hat OpenShift AI 3.4","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1787102977","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"defaultStatus":"affected","packageName":"rhoai/odh-mod-arch-gen-ai-rhel9","product":"Red Hat OpenShift AI 3.4","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1786611759","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"defaultStatus":"affected","packageName":"rhoai/odh-workload-variant-autoscaler-controller-rhel9","product":"Red Hat OpenShift AI 3.4","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1787562200","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.12::el9"],"defaultStatus":"affected","packageName":"openshift4/ose-installer","product":"Red Hat OpenShift Container Platform 4.12","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1786752886","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.14::el9"],"defaultStatus":"affected","packageName":"openshift4/ose-sdn-rhel8","product":"Red Hat OpenShift Container Platform 4.14","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1787002807","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.15::el9"],"defaultStatus":"affected","packageName":"openshift4/ose-sdn-rhel9","product":"Red Hat OpenShift Container Platform 4.15","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1787055135","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.16::el9"],"defaultStatus":"affected","packageName":"openshift4/ose-sdn-rhel9","product":"Red Hat OpenShift Container Platform 4.16","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1786788280","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.17::el9"],"defaultStatus":"affected","packageName":"openshift4/ose-cli-rhel9","product":"Red Hat OpenShift Container Platform 4.17","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1787549445","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.18::el9"],"defaultStatus":"affected","packageName":"openshift4/ose-cli-rhel9","product":"Red Hat OpenShift Container Platform 4.18","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1786754308","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.19::el9"],"defaultStatus":"affected","packageName":"openshift4/ose-cli-rhel9","product":"Red Hat OpenShift Container Platform 4.19","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1786489910","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.20::el9"],"defaultStatus":"affected","packageName":"openshift4/ose-cli-rhel9","product":"Red Hat OpenShift Container Platform 4.20","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1786494900","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.21::el9"],"defaultStatus":"affected","packageName":"openshift4/ose-cli-rhel9","product":"Red Hat OpenShift Container Platform 4.21","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1786496647","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.21::el9"],"defaultStatus":"affected","packageName":"openshift4/ose-hypershift-rhel9","product":"Red Hat OpenShift Container Platform 4.21","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1786573075","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_devspaces:3.30::el9"],"defaultStatus":"affected","packageName":"devspaces/configbump-rhel9","product":"Red Hat OpenShift Dev Spaces 3.30","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1787756267","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_devspaces:3.30::el9"],"defaultStatus":"affected","packageName":"devspaces/traefik-rhel9","product":"Red Hat OpenShift Dev Spaces 3.30","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1787756799","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:service_mesh:3.0::el9"],"defaultStatus":"affected","packageName":"openshift-service-mesh/istio-cni-rhel9","product":"Red Hat OpenShift Service Mesh 3.0","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782222217","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:service_mesh:3.0::el9"],"defaultStatus":"affected","packageName":"openshift-service-mesh/istio-pilot-rhel9","product":"Red Hat OpenShift Service Mesh 3.0","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782223341","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:service_mesh:3.0::el9"],"defaultStatus":"affected","packageName":"openshift-service-mesh/istio-proxyv2-rhel9","product":"Red Hat OpenShift Service Mesh 3.0","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782296193","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:service_mesh:3.0::el9"],"defaultStatus":"affected","packageName":"openshift-service-mesh/istio-rhel9-operator","product":"Red Hat OpenShift Service Mesh 3.0","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782222607","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:service_mesh:3.1::el9"],"defaultStatus":"affected","packageName":"openshift-service-mesh/istio-cni-rhel9","product":"Red Hat OpenShift Service Mesh 3.1","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782222163","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:service_mesh:3.1::el9"],"defaultStatus":"affected","packageName":"openshift-service-mesh/istio-pilot-rhel9","product":"Red Hat OpenShift Service Mesh 3.1","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782223138","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:service_mesh:3.1::el9"],"defaultStatus":"affected","packageName":"openshift-service-mesh/istio-proxyv2-rhel9","product":"Red Hat OpenShift Service Mesh 3.1","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782222394","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:service_mesh:3.1::el9"],"defaultStatus":"affected","packageName":"openshift-service-mesh/istio-rhel9-operator","product":"Red Hat OpenShift Service Mesh 3.1","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782222451","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:service_mesh:3.2::el9"],"defaultStatus":"affected","packageName":"openshift-service-mesh/istio-cni-rhel9","product":"Red Hat OpenShift Service Mesh 3.2","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782226178","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:service_mesh:3.2::el9"],"defaultStatus":"affected","packageName":"openshift-service-mesh/istio-pilot-rhel9","product":"Red Hat OpenShift Service Mesh 3.2","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782224487","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:service_mesh:3.2::el9"],"defaultStatus":"affected","packageName":"openshift-service-mesh/istio-proxyv2-rhel9","product":"Red Hat OpenShift Service Mesh 3.2","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782303211","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:service_mesh:3.2::el9"],"defaultStatus":"affected","packageName":"openshift-service-mesh/istio-rhel9-operator","product":"Red Hat OpenShift Service Mesh 3.2","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782224541","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:service_mesh:3.3::el9"],"defaultStatus":"affected","packageName":"openshift-service-mesh/istio-cni-rhel9","product":"Red Hat OpenShift Service Mesh 3.3","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782223045","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:service_mesh:3.3::el9"],"defaultStatus":"affected","packageName":"openshift-service-mesh/istio-pilot-rhel9","product":"Red Hat OpenShift Service Mesh 3.3","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782222366","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:service_mesh:3.3::el9"],"defaultStatus":"affected","packageName":"openshift-service-mesh/istio-proxyv2-rhel9","product":"Red Hat OpenShift Service Mesh 3.3","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782310747","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:service_mesh:3.3::el9"],"defaultStatus":"affected","packageName":"openshift-service-mesh/istio-rhel9-operator","product":"Red Hat OpenShift Service Mesh 3.3","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782222038","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:workload_availability_nhc:0.12::el9"],"defaultStatus":"affected","packageName":"workload-availability/node-healthcheck-rhel9-operator","product":"Red Hat OpenShift Workload Availability 0.12","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1785202723","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:workload_availability_snr:0.13::el9"],"defaultStatus":"affected","packageName":"workload-availability/self-node-remediation-rhel9-operator","product":"Red Hat OpenShift Workload Availability 0.13","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1785203036","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:workload_availability_sbr:0.3::el9"],"defaultStatus":"affected","packageName":"workload-availability/storage-based-remediation-rhel9-operator","product":"Red Hat OpenShift Workload Availability 0.3","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1785203474","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:workload_availability_mdr:0.7::el9"],"defaultStatus":"affected","packageName":"workload-availability/machine-deletion-remediation-rhel9-operator","product":"Red Hat OpenShift Workload Availability 0.7","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1785203508","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:workload_availability_far:0.8::el9"],"defaultStatus":"affected","packageName":"workload-availability/fence-agents-remediation-rhel9-operator","product":"Red Hat OpenShift Workload Availability 0.8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1785203079","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:workload_availability_nmo:5.7::el9"],"defaultStatus":"affected","packageName":"workload-availability/node-maintenance-rhel9-operator","product":"Red Hat OpenShift Workload Availability 5.7","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1785202847","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:quay:3.10::el8"],"defaultStatus":"affected","packageName":"quay/quay-rhel8","product":"Red Hat Quay 3.10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1783750447","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:quay:3.12::el8"],"defaultStatus":"affected","packageName":"quay/quay-rhel8","product":"Red Hat Quay 3.12","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1783751865","versionType":"rpm"},{"lessThan":"*","status":"unaffected","version":"1784353904","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:quay:3.15::el8"],"defaultStatus":"affected","packageName":"quay/quay-rhel8","product":"Red Hat Quay 3.15","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1784351966","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:quay:3.16::el9"],"defaultStatus":"affected","packageName":"quay/quay-rhel9","product":"Red Hat Quay 3.16","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1783955846","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:quay:3.9::el8"],"defaultStatus":"affected","packageName":"quay/quay-rhel8","product":"Red Hat Quay 3.9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1784125838","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:trusted_artifact_signer:1.4::el9"],"defaultStatus":"affected","packageName":"conforma-cli-stack-v1","product":"Red Hat Trusted Artifact Signer 1.4","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"4-1.4.2","versionType":"rpm"},{"lessThan":"*","status":"unaffected","version":"4-1.4.3","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:assisted_installer:2"],"defaultStatus":"affected","packageName":"rhai/assisted-installer-rhel9","product":"Assisted Installer for Red Hat OpenShift Container Platform 2","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:confidential_compute_attestation:1"],"defaultStatus":"affected","packageName":"build-of-trustee/trustee-rhel9-operator","product":"Confidential Compute Attestation","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:confidential_compute_attestation:1"],"defaultStatus":"affected","packageName":"confidential-compute-attestation-tech-preview/trustee-rhel9-operator","product":"Confidential Compute Attestation","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:confidential_compute_attestation:1"],"defaultStatus":"affected","packageName":"openshift-sandboxed-containers/osc-monitor-rhel9","product":"Confidential Compute Attestation","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:cryostat:4"],"defaultStatus":"affected","packageName":"cryostat/cryostat-storage-rhel9","product":"Cryostat 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"],"defaultStatus":"unaffected","packageName":"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9","product":"Custom Metric Autoscaler operator for Red Hat Openshift","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ext_dns_optr:1"],"defaultStatus":"affected","packageName":"edo/external-dns-rhel9","product":"ExternalDNS Operator","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ext_dns_optr:1"],"defaultStatus":"affected","packageName":"edo/external-dns-rhel9-operator","product":"ExternalDNS Operator","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:external_secrets_operator:1"],"defaultStatus":"affected","packageName":"external-secrets-operator/external-secrets-rhel9","product":"External Secrets Operator for Red Hat OpenShift","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_file_integrity_operator:1"],"defaultStatus":"affected","packageName":"compliance/openshift-compliance-operator-bundle","product":"File Integrity Operator","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:gatekeeper:3"],"defaultStatus":"affected","packageName":"gatekeeper/gatekeeper-rhel9-operator","product":"Gatekeeper 3","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:lvms:4"],"defaultStatus":"affected","packageName":"lvms4/lvms-rhel9-operator","product":"Logical Volume Manager Storage","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:lvms:4"],"defaultStatus":"unaffected","packageName":"lvms4/topolvm-rhel8","product":"Logical Volume Manager Storage","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:lvms:4"],"defaultStatus":"unaffected","packageName":"lvms4/topolvm-rhel9","product":"Logical Volume Manager Storage","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:multiarch_tuning_operator"],"defaultStatus":"unaffected","packageName":"multiarch-tuning/multiarch-tuning-rhel9-operator","product":"Multiarch Tuning Operator","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:multicluster_engine"],"defaultStatus":"affected","packageName":"multicluster-engine/addon-manager-rhel9","product":"Multicluster Engine for Kubernetes","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:multicluster_engine"],"defaultStatus":"affected","packageName":"multicluster-engine/assisted-installer-rhel8","product":"Multicluster Engine for Kubernetes","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:multicluster_engine"],"defaultStatus":"unknown","packageName":"multicluster-engine/assisted-installer-rhel9","product":"Multicluster Engine for Kubernetes","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:multicluster_engine"],"defaultStatus":"affected","packageName":"multicluster-engine/clusterlifecycle-state-metrics-rhel9","product":"Multicluster Engine for Kubernetes","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:multicluster_engine"],"defaultStatus":"unaffected","packageName":"multicluster-engine/discovery-rhel9","product":"Multicluster Engine for Kubernetes","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:multicluster_engine"],"defaultStatus":"affected","packageName":"multicluster-engine/maestro-rhel9","product":"Multicluster Engine for Kubernetes","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:multicluster_engine"],"defaultStatus":"affected","packageName":"multicluster-engine/managedcluster-import-controller-rhel9","product":"Multicluster Engine for Kubernetes","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:multicluster_engine"],"defaultStatus":"affected","packageName":"multicluster-engine/multicloud-manager-rhel9","product":"Multicluster Engine for Kubernetes","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:multicluster_engine"],"defaultStatus":"affected","packageName":"multicluster-engine/placement-rhel9","product":"Multicluster Engine for Kubernetes","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:multicluster_engine"],"defaultStatus":"affected","packageName":"multicluster-engine/registration-operator-rhel9","product":"Multicluster Engine for Kubernetes","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:multicluster_engine"],"defaultStatus":"affected","packageName":"multicluster-engine/work-rhel9","product":"Multicluster Engine for Kubernetes","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:multicluster_globalhub"],"defaultStatus":"unknown","packageName":"multicluster-globalhub/multicluster-globalhub-agent-rhel8","product":"Multicluster Global Hub","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:multicluster_globalhub"],"defaultStatus":"unaffected","packageName":"multicluster-globalhub/multicluster-globalhub-agent-rhel9","product":"Multicluster Global Hub","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:network_observ_optr:1"],"defaultStatus":"unaffected","packageName":"network-observability/network-observability-rhel9-operator","product":"Network Observability Operator","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ocp_tools"],"defaultStatus":"affected","packageName":"helm","product":"OpenShift Developer Tools and Services","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_lightspeed"],"defaultStatus":"affected","packageName":"openshift-lightspeed/lightspeed-rhel9-operator","product":"OpenShift Lightspeed","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_pipelines:1"],"defaultStatus":"affected","packageName":"openshift-pipelines-client","product":"OpenShift Pipelines","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:serverless:1"],"defaultStatus":"affected","packageName":"kn-workflow-plugin","product":"OpenShift Serverless","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:service_mesh:2"],"defaultStatus":"unaffected","packageName":"openshift-golang-builder-container","product":"OpenShift Service Mesh 2","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:service_mesh:2"],"defaultStatus":"affected","packageName":"openshift-service-mesh/pilot-rhel8","product":"OpenShift Service Mesh 2","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:service_mesh:3"],"defaultStatus":"affected","packageName":"openshift-golang-builder-container","product":"OpenShift Service Mesh 3","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_power_monitoring"],"defaultStatus":"affected","packageName":"openshift-power-monitoring/power-monitoring-rhel9-operator","product":"Power monitoring for Red Hat OpenShift","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:acm:2"],"defaultStatus":"unaffected","packageName":"rhacm2/acm-governance-policy-addon-controller-rhel9","product":"Red Hat Advanced Cluster Management for Kubernetes 2","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:acm:2"],"defaultStatus":"unaffected","packageName":"rhacm2/acm-governance-policy-framework-addon-rhel9","product":"Red Hat Advanced Cluster Management for Kubernetes 2","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:acm:2"],"defaultStatus":"unaffected","packageName":"rhacm2/config-policy-controller-rhel9","product":"Red Hat Advanced Cluster Management for Kubernetes 2","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:acm:2"],"defaultStatus":"unaffected","packageName":"rhacm2/governance-policy-propagator-rhel9","product":"Red Hat Advanced Cluster Management for Kubernetes 2","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:acm:2"],"defaultStatus":"affected","packageName":"rhacm2/klusterlet-addon-controller-rhel9","product":"Red Hat Advanced Cluster Management for Kubernetes 2","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:acm:2"],"defaultStatus":"affected","packageName":"rhacm2/thanos-rhel9","product":"Red Hat Advanced Cluster Management for Kubernetes 2","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"defaultStatus":"unaffected","packageName":"ansible-automation-platform/platform-operator-bundle","product":"Red Hat Ansible Automation Platform 2","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"defaultStatus":"affected","packageName":"automation-gateway-proxy","product":"Red Hat Ansible Automation Platform 2","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"defaultStatus":"affected","packageName":"automation-gateway-proxy-openssl30","product":"Red Hat Ansible Automation Platform 2","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"defaultStatus":"affected","packageName":"automation-gateway-proxy-openssl32","product":"Red Hat Ansible Automation Platform 2","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ceph_storage:5"],"defaultStatus":"unknown","packageName":"rhceph/rhceph-5-dashboard-rhel8","product":"Red Hat Ceph Storage 5","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ceph_storage:6"],"defaultStatus":"unknown","packageName":"rhceph/rhceph-6-dashboard-rhel9","product":"Red Hat Ceph Storage 6","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ceph_storage:9"],"defaultStatus":"unknown","packageName":"rhceph/alloy-rhel10","product":"Red Hat Ceph Storage 9","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:certifications:9"],"defaultStatus":"affected","packageName":"redhat-certification-preflight","product":"Red Hat Certification Program for Red Hat Enterprise Linux 9","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:edge_manager:1"],"defaultStatus":"affected","packageName":"flightctl","product":"Red Hat Edge Manager 1","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:edge_manager:1"],"defaultStatus":"affected","packageName":"rhem/flightctl-api-rhel9","product":"Red Hat Edge Manager 1","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10"],"defaultStatus":"affected","packageName":"gvisor-tap-vsock","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10"],"defaultStatus":"affected","packageName":"ignition","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10"],"defaultStatus":"affected","packageName":"podman","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10"],"defaultStatus":"affected","packageName":"rhel10/bootc-image-builder","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10"],"defaultStatus":"affected","packageName":"rhel10-eus/rhel-10.0-bootc-image-builder","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"osbuild-composer","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"unaffected","packageName":"buildah","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"unaffected","packageName":"conmon","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"gvisor-tap-vsock","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"ignition","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"podman","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"rhel9/bootc-image-builder","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"rhel9-eus/rhel-9.6-bootc-image-builder","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"skopeo","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux_ai:3"],"defaultStatus":"unknown","packageName":"golang","product":"Red Hat Enterprise Linux AI (RHEL AI) 3","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:lightspeed_for_runtimes:1"],"defaultStatus":"affected","packageName":"rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator","product":"Red Hat Lightspeed for Runtimes Operator","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"affected","packageName":"rhoai/odh-ai-gateway-payload-processing-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"affected","packageName":"rhoai/odh-data-science-pipelines-argo-argoexec-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"affected","packageName":"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"affected","packageName":"rhoai/odh-kserve-llmisvc-controller-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"unaffected","packageName":"rhoai/odh-kueue-controller-rhel8","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"unaffected","packageName":"rhoai/odh-llm-d-inference-scheduler-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"unaffected","packageName":"rhoai/odh-llm-d-routing-sidecar-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"affected","packageName":"rhoai/odh-maas-api-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"unaffected","packageName":"rhoai/odh-mlflow-operator-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"affected","packageName":"rhoai/odh-ml-pipelines-api-server-v2-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"affected","packageName":"rhoai/odh-ml-pipelines-driver-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"affected","packageName":"rhoai/odh-ml-pipelines-launcher-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"affected","packageName":"rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"affected","packageName":"rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"affected","packageName":"rhoai/odh-model-controller-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"affected","packageName":"rhoai/odh-modelmesh-serving-controller-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"unaffected","packageName":"rhoai/odh-model-registry-operator-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"unaffected","packageName":"rhoai/odh-model-registry-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"affected","packageName":"rhoai/odh-model-serving-api-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_cluster_manager_cli:1"],"defaultStatus":"affected","packageName":"ocm-cli-clients/ocm-cli-rhel9","product":"Red Hat OpenShift Cluster Manager CLI","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"unaffected","packageName":"conmon","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"unaffected","packageName":"ignition","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"kata-containers","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"openshift4/ose-node","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"openshift4/ose-sdn-rhel7","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"openshift-golang-builder-container","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"unaffected","packageName":"podman","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"unaffected","packageName":"skopeo","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_data_foundation:4"],"defaultStatus":"unaffected","packageName":"ocs4/cephcsi-rhel8","product":"Red Hat Openshift Data Foundation 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_data_foundation:4"],"defaultStatus":"unaffected","packageName":"odf4/cephcsi-rhel8","product":"Red Hat Openshift Data Foundation 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_data_foundation:4"],"defaultStatus":"unaffected","packageName":"odf4/cephcsi-rhel9","product":"Red Hat Openshift Data Foundation 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_data_foundation:4"],"defaultStatus":"affected","packageName":"odf4/odf-cli-rhel9","product":"Red Hat Openshift Data Foundation 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_data_foundation:4"],"defaultStatus":"unaffected","packageName":"odf4/odf-rhel9-operator","product":"Red Hat Openshift Data Foundation 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:devworkspace"],"defaultStatus":"affected","packageName":"devworkspace/devworkspace-rhel9-operator","product":"Red Hat OpenShift Dev Workspaces Operator","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_distributed_tracing:3"],"defaultStatus":"affected","packageName":"rhosdt/tempo-rhel9","product":"Red Hat OpenShift distributed tracing 3","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:windows_machine_config"],"defaultStatus":"unaffected","packageName":"openshift4-wincw/windows-machine-config-rhel9-operator","product":"Red Hat OpenShift for Windows Containers","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_gitops:1"],"defaultStatus":"affected","packageName":"openshift-gitops-1/argocd-rhel8","product":"Red Hat OpenShift GitOps","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_gitops:1"],"defaultStatus":"affected","packageName":"openshift-gitops-1/argocd-rhel9","product":"Red Hat OpenShift GitOps","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:container_native_virtualization:4"],"defaultStatus":"unaffected","packageName":"container-native-virtualization/kubevirt-apiserver-proxy-rhel9","product":"Red Hat OpenShift Virtualization 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:container_native_virtualization:4"],"defaultStatus":"unaffected","packageName":"container-native-virtualization/virt-api-rhel9","product":"Red Hat OpenShift Virtualization 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:container_native_virtualization:4"],"defaultStatus":"affected","packageName":"kubevirt","product":"Red Hat OpenShift Virtualization 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:container_native_virtualization:4"],"defaultStatus":"affected","packageName":"openshift-golang-builder-container","product":"Red Hat OpenShift Virtualization 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:16.2"],"defaultStatus":"unaffected","packageName":"rhosp-rhel8/osp-director-operator-bundle","product":"Red Hat OpenStack Platform 16.2","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:17.1"],"defaultStatus":"unaffected","packageName":"rhosp-rhel9/osp-director-operator-bundle","product":"Red Hat OpenStack Platform 17.1","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:18.0"],"defaultStatus":"unaffected","packageName":"rhoso-operators/ovn-rhel9-operator","product":"Red Hat OpenStack Platform 18.0","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:quay:3"],"defaultStatus":"affected","packageName":"quay/quay-builder-rhel8","product":"Red Hat Quay 3","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6"],"defaultStatus":"affected","packageName":"satellite/iop-vmaas-rhel9","product":"Red Hat Satellite 6","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:service_interconnect:1"],"defaultStatus":"affected","packageName":"skupper-cli","product":"Red Hat Service Interconnect 1","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:service_interconnect:2"],"defaultStatus":"affected","packageName":"skupper-cli","product":"Red Hat Service Interconnect 2","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_security_profiles_operator:1"],"defaultStatus":"affected","packageName":"compliance/openshift-security-profiles-rhel8-operator","product":"Security Profiles Operator","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:zero_trust_workload_identity_manager:1"],"defaultStatus":"affected","packageName":"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9","product":"Zero Trust Workload Identity Manager","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:zero_trust_workload_identity_manager:0"],"defaultStatus":"affected","packageName":"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9","product":"Zero Trust Workload Identity Manager - Tech Preview","vendor":"Red Hat"}],"datePublic":"2026-05-07T19:41:18.615Z","descriptions":[{"lang":"en","value":"A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition."}],"metrics":[{"other":{"content":{"namespace":"https://access.redhat.com/security/updates/classification/","value":"Important"},"type":"Red Hat severity rating"}},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1046","description":"Creation of Immutable Text Using String Concatenation","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-09-11T12:08:57.902Z","orgId":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","shortName":"redhat-SADP"},"references":[{"tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-42499"},{"name":"RHBZ#2467809","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467809"},{"tags":["x_sadp-csaf-vex"],"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42499.json"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:59830"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:56785"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:56910"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:56852"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:60018"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:57482"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:54552"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:57845"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:57914"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:63636"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:49702"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:65335"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:66327"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:63332"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:22120"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:63022"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:65534"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:65116"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:65895"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:64818"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:63163"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:22112"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:62407"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:61253"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:62754"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:57649"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:62753"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:49712"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:51112"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:65336"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:62803"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:22121"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:62406"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:65886"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:65117"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:65153"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:54531"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:34364"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:56340"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:47952"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:50843"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:51033"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:59467"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:66022"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:43692"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36319"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36625"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36754"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:33574"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:17713"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:17714"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:41928"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:50300"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:43038"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:42644"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:60520"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:59833"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:56789"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:56912"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:56854"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:60023"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:57487"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:54555"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:54583"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:54602"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:62260"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:33120"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:33123"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:33142"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:33150"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:54287"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:54284"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:54286"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:54285"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:54274"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:54283"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:41031"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:42146"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:43052"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:42796"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:41066"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:40262"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36797"},{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:57194"}],"solutions":[{"lang":"en","value":"RHSA-2026:59830: Red Hat OpenShift Container Platform 4.12"},{"lang":"en","value":"RHSA-2026:56785: Red Hat OpenShift Container Platform 4.14"},{"lang":"en","value":"RHSA-2026:56910: Red Hat OpenShift Container Platform 4.15"},{"lang":"en","value":"RHSA-2026:56852: Red Hat OpenShift Container Platform 4.16"},{"lang":"en","value":"RHSA-2026:60018: Red Hat OpenShift Container Platform 4.17"},{"lang":"en","value":"RHSA-2026:57482: Red Hat OpenShift Container Platform 4.18"},{"lang":"en","value":"RHSA-2026:54552: Red Hat OpenShift Container Platform 4.19"},{"lang":"en","value":"RHSA-2026:57845: Red Hat OpenShift Container Platform 4.16"},{"lang":"en","value":"RHSA-2026:57914: Red Hat OpenShift Container Platform 4.18"},{"lang":"en","value":"RHSA-2026:63636: Red Hat OpenShift Container Platform 4.19"},{"lang":"en","value":"RHSA-2026:49702: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:65335: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:66327: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:63332: Red Hat Enterprise Linux AppStream (v. 10)"},{"lang":"en","value":"RHSA-2026:22120: Red Hat Enterprise Linux AppStream (v. 10)"},{"lang":"en","value":"RHSA-2026:63022: Red Hat Enterprise Linux AppStream (v. 10)"},{"lang":"en","value":"RHSA-2026:65534: Red Hat Enterprise Linux AppStream (v. 10)"},{"lang":"en","value":"RHSA-2026:65116: Red Hat Enterprise Linux AppStream (v. 10)"},{"lang":"en","value":"RHSA-2026:65895: Red Hat Enterprise Linux AppStream (v. 10)"},{"lang":"en","value":"RHSA-2026:64818: Red Hat Enterprise Linux AppStream (v. 10)"},{"lang":"en","value":"RHSA-2026:63163: Red Hat Enterprise Linux AppStream (v. 8)"},{"lang":"en","value":"RHSA-2026:22112: Red Hat Enterprise Linux AppStream (v. 8)"},{"lang":"en","value":"RHSA-2026:62407: Red Hat Enterprise Linux AppStream (v. 8)"},{"lang":"en","value":"RHSA-2026:61253: Red Hat Enterprise Linux AppStream E4S (v.9.2)"},{"lang":"en","value":"RHSA-2026:62754: Red Hat Enterprise Linux AppStream E4S (v.9.2)"},{"lang":"en","value":"RHSA-2026:57649: Red Hat Enterprise Linux AppStream E4S (v.9.4)"},{"lang":"en","value":"RHSA-2026:62753: Red Hat Enterprise Linux AppStream E4S (v.9.4)"},{"lang":"en","value":"RHSA-2026:49712: Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:51112: Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:65336: Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:62803: Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:22121: Red Hat Enterprise Linux AppStream (v. 9)"},{"lang":"en","value":"RHSA-2026:62406: Red Hat Enterprise Linux AppStream (v. 9)"},{"lang":"en","value":"RHSA-2026:65886: Red Hat Enterprise Linux AppStream (v. 9)"},{"lang":"en","value":"RHSA-2026:65117: Red Hat Enterprise Linux AppStream (v. 9)"},{"lang":"en","value":"RHSA-2026:65153: Red Hat Enterprise Linux AppStream (v. 9)"},{"lang":"en","value":"RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19"},{"lang":"en","value":"RHSA-2026:34364: Logging Subsystem for Red Hat OpenShift 6.4"},{"lang":"en","value":"RHSA-2026:56340: Logging Subsystem for Red Hat OpenShift 6.5"},{"lang":"en","value":"RHSA-2026:47952: Logging for Red Hat OpenShift 6.2"},{"lang":"en","value":"RHSA-2026:50843: Logging for Red Hat OpenShift 6"},{"lang":"en","value":"RHSA-2026:51033: OpenShift API for Data Protection 1.3"},{"lang":"en","value":"RHSA-2026:59467: OpenShift API for Data Protection 1.4"},{"lang":"en","value":"RHSA-2026:66022: OpenShift API for Data Protection 1.5"},{"lang":"en","value":"RHSA-2026:43692: OpenShift API for Data Protection 1.6"},{"lang":"en","value":"RHSA-2026:36319: Red Hat Advanced Cluster Security 4.9"},{"lang":"en","value":"RHSA-2026:36625: Red Hat Advanced Cluster Security for Kubernetes 4.10"},{"lang":"en","value":"RHSA-2026:36754: Red Hat Developer Hub 1.10"},{"lang":"en","value":"RHSA-2026:33574: Red Hat Developer Hub 1.9"},{"lang":"en","value":"RHSA-2026:17713: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:17714: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:41928: Red Hat Migration Toolkit 1.8"},{"lang":"en","value":"RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"},{"lang":"en","value":"RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2"},{"lang":"en","value":"RHSA-2026:42644: Red Hat OpenShift AI 2.25"},{"lang":"en","value":"RHSA-2026:60520: Red Hat OpenShift AI 3.4"},{"lang":"en","value":"RHSA-2026:59833: Red Hat OpenShift Container Platform 4.12"},{"lang":"en","value":"RHSA-2026:56789: Red Hat OpenShift Container Platform 4.14"},{"lang":"en","value":"RHSA-2026:56912: Red Hat OpenShift Container Platform 4.15"},{"lang":"en","value":"RHSA-2026:56854: Red Hat OpenShift Container Platform 4.16"},{"lang":"en","value":"RHSA-2026:60023: Red Hat OpenShift Container Platform 4.17"},{"lang":"en","value":"RHSA-2026:57487: Red Hat OpenShift Container Platform 4.18"},{"lang":"en","value":"RHSA-2026:54555: Red Hat OpenShift Container Platform 4.19"},{"lang":"en","value":"RHSA-2026:54583: Red Hat OpenShift Container Platform 4.20"},{"lang":"en","value":"RHSA-2026:54602: Red Hat OpenShift Container Platform 4.21"},{"lang":"en","value":"RHSA-2026:62260: Red Hat OpenShift Dev Spaces 3.30"},{"lang":"en","value":"RHSA-2026:33120: Red Hat OpenShift Service Mesh 3.0"},{"lang":"en","value":"RHSA-2026:33123: Red Hat OpenShift Service Mesh 3.1"},{"lang":"en","value":"RHSA-2026:33142: Red Hat OpenShift Service Mesh 3.2"},{"lang":"en","value":"RHSA-2026:33150: Red Hat OpenShift Service Mesh 3.3"},{"lang":"en","value":"RHSA-2026:54287: Red Hat OpenShift Workload Availability 0.12"},{"lang":"en","value":"RHSA-2026:54284: Red Hat OpenShift Workload Availability 0.13"},{"lang":"en","value":"RHSA-2026:54286: Red Hat OpenShift Workload Availability 0.3"},{"lang":"en","value":"RHSA-2026:54285: Red Hat OpenShift Workload Availability 0.7"},{"lang":"en","value":"RHSA-2026:54274: Red Hat OpenShift Workload Availability 0.8"},{"lang":"en","value":"RHSA-2026:54283: Red Hat OpenShift Workload Availability 5.7"},{"lang":"en","value":"RHSA-2026:41031: Red Hat Quay 3.10"},{"lang":"en","value":"RHSA-2026:42146: Red Hat Quay 3.12"},{"lang":"en","value":"RHSA-2026:43052: Red Hat Quay 3.12"},{"lang":"en","value":"RHSA-2026:42796: Red Hat Quay 3.15"},{"lang":"en","value":"RHSA-2026:41066: Red Hat Quay 3.16"},{"lang":"en","value":"RHSA-2026:40262: Red Hat Quay 3.9"},{"lang":"en","value":"RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"},{"lang":"en","value":"RHSA-2026:57194: multicluster engine for Kubernetes 2.11"}],"timeline":[{"lang":"en","time":"2026-05-07T20:00:51.685Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-05-07T19:41:18.615Z","value":"Made public."}],"title":"net/mail: golang: net/mail: Denial of Service via pathological email address parsing","workarounds":[{"lang":"en","value":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"x_adpType":"supplier","x_generator":{"engine":"sadp-cli 1.0.0"}}],"cna":{"affected":[{"collectionURL":"https://pkg.go.dev","defaultStatus":"unaffected","packageName":"net/mail","product":"net/mail","programRoutines":[{"name":"addrParser.consumePhrase"},{"name":"AddressParser.Parse"},{"name":"AddressParser.ParseList"},{"name":"Header.AddressList"},{"name":"ParseAddress"},{"name":"ParseAddressList"}],"vendor":"Go standard library","versions":[{"lessThan":"1.25.10","status":"affected","version":"0","versionType":"semver"},{"lessThan":"1.26.3","status":"affected","version":"1.26.0-0","versionType":"semver"}]}],"descriptions":[{"lang":"en","value":"Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322."}],"problemTypes":[{"descriptions":[{"description":"CWE-407: Inefficient Algorithmic Complexity","lang":"en"}]}],"providerMetadata":{"dateUpdated":"2026-05-07T19:41:18.615Z","orgId":"1bb62c36-49e3-4200-9d77-64a1400537cc","shortName":"Go"},"references":[{"url":"https://go.dev/issue/78987"},{"url":"https://go.dev/cl/771520"},{"url":"https://groups.google.com/g/golang-announce/c/qcCIEXso47M"},{"url":"https://pkg.go.dev/vuln/GO-2026-4977"}],"title":"Quadratic string concatenation in consumePhrase in net/mail"}},"cveMetadata":{"assignerOrgId":"1bb62c36-49e3-4200-9d77-64a1400537cc","assignerShortName":"Go","cveId":"CVE-2026-42499","datePublished":"2026-05-07T19:41:18.615Z","dateReserved":"2026-04-28T00:21:12.791Z","dateUpdated":"2026-09-11T12:08:57.902Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-05-07 20:16:44","lastModifiedDate":"2026-09-11 13:17:59","problem_types":["NVD-CWE-noinfo","CWE-1046","CWE-407: Inefficient Algorithmic Complexity","CWE-1046 Creation of Immutable Text Using String Concatenation"],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-08T16:55:28.873015Z","id":"CVE-2026-42499","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*","versionEndExcluding":"1.25.10","matchCriteriaId":"1C966EF3-C51C-4239-B5FC-C44A5202FEC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*","versionStartIncluding":"1.26.0","versionEndExcluding":"1.26.3","matchCriteriaId":"522E4CD0-2B99-4363-9C78-0BAFD988A2D6"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"42499","Ordinal":"1","Title":"Quadratic string concatenation in consumePhrase in net/mail","CVE":"CVE-2026-42499","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"42499","Ordinal":"1","NoteData":"Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.","Type":"Description","Title":"Quadratic string concatenation in consumePhrase in net/mail"}]}}}