{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat JBoss Web Server 6.1.3 zip release is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, and Windows Server.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.\n\nThis release of Red Hat JBoss Web Server 6.1.3 serves as a replacement for Red Hat JBoss Web Server 6.1.2. This release includes bug fixes, enhancements and component upgrades, which are documented in the Release Notes that are linked to in the References section.\n\nSecurity Fix(es):\n\n* tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE [jws-6] (CVE-2025-55752)\n* tomcat-catalina: Apache Tomcat: Denial of service [jws-6] (CVE-2025-61795)\n* tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve [jws-6] (CVE-2025-31651)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:19810",
        "url": "https://access.redhat.com/errata/RHSA-2025:19810"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_jboss_web_server/6.1/html/red_hat_jboss_web_server_6.1_service_pack_3_release_notes/index",
        "url": "https://docs.redhat.com/en/documentation/red_hat_jboss_web_server/6.1/html/red_hat_jboss_web_server_6.1_service_pack_3_release_notes/index"
      },
      {
        "category": "external",
        "summary": "2362782",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
      },
      {
        "category": "external",
        "summary": "2406588",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406588"
      },
      {
        "category": "external",
        "summary": "2406591",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19810.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Web Server 6.1.3 release and security update",
    "tracking": {
      "current_release_date": "2026-03-18T20:51:37+00:00",
      "generator": {
        "date": "2026-03-18T20:51:37+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.3"
        }
      },
      "id": "RHSA-2025:19810",
      "initial_release_date": "2025-11-06T16:24:24+00:00",
      "revision_history": [
        {
          "date": "2025-11-06T16:24:24+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-11-26T15:57:24+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-03-18T20:51:37+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Web Server 6.1.3",
                "product": {
                  "name": "Red Hat JBoss Web Server 6.1.3",
                  "product_id": "Red Hat JBoss Web Server 6.1.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:6.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Web Server"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-31651",
      "cwe": {
        "id": "CWE-150",
        "name": "Improper Neutralization of Escape, Meta, or Control Sequences"
      },
      "discovery_date": "2025-04-28T20:00:56.551028+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2362782"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Tomcat\u0027s rewrite rule processing component. This vulnerability allows security constraints to be bypassed via specially crafted HTTP requests when specific, uncommon rewrite rule configurations are in use.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Low severity because it only manifests under a narrow set of conditions involving uncommon and non-default rewrite rule configurations that rely on specific patterns in the raw requestURI, including path parameters. In most deployments, rewrite rules operate on decoded and normalized URIs or are used for non-security-critical purposes like routing. Furthermore, Tomcat\u2019s internal processing already normalizes and removes path parameters (;-delimited) before applying security constraints, meaning any bypass would only be feasible if the rewrite logic directly enforced security (which is a poor practice). The flaw does not allow direct code execution, data leakage, or privilege escalation unless the rewrite rule was explicitly misused as a substitute for proper access control. \n\nIts impact is further mitigated by the fact that rewrite rules are not typically relied upon for access enforcement. As such, while the bug may lead to incorrect rule evaluation under certain edge-case configurations, it does not represent a significant security risk in practice.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Web Server 6.1.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "RHBZ#2362782",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-31651",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/list.html?announce@tomcat.apache.org",
          "url": "https://lists.apache.org/list.html?announce@tomcat.apache.org"
        }
      ],
      "release_date": "2025-04-28T19:17:21.721000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-11-06T16:24:24+00:00",
          "details": "Before applying the update, back up your existing Red Hat JBoss Web Server installation, including all applications and configuration files.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Red Hat JBoss Web Server 6.1.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:19810"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "Red Hat JBoss Web Server 6.1.3"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Web Server 6.1.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve"
    },
    {
      "cve": "CVE-2025-55752",
      "cwe": {
        "id": "CWE-23",
        "name": "Relative Path Traversal"
      },
      "discovery_date": "2025-10-27T18:01:22.818037+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2406591"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A directory traversal vulnerability in Apache Tomcat caused by improper URL normalization during request rewriting. When specific rewrite rules are used, an attacker could craft a malicious request to bypass access restrictions and reach protected directories such as /WEB-INF/ or /META-INF/. If HTTP PUT requests are also enabled, this flaw could allow the upload of malicious files, potentially leading to remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important rather than Critical because successful exploitation depends on specific, non-default configuration conditions. The flaw only becomes exploitable when both URL rewriting rules that modify the request path are in use and HTTP PUT requests are enabled \u2014 a feature typically restricted to administrative or trusted users. In standard Tomcat deployments, PUT is disabled or tightly controlled, and rewrite configurations rarely expose sensitive paths. Therefore, while the issue could theoretically lead to remote code execution, the limited attack surface and requirement for uncommon setup conditions significantly reduce its overall risk level.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Web Server 6.1.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "RHBZ#2406591",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55752",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a",
          "url": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog",
          "url": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog"
        }
      ],
      "release_date": "2025-10-27T17:29:56.060000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-11-06T16:24:24+00:00",
          "details": "Before applying the update, back up your existing Red Hat JBoss Web Server installation, including all applications and configuration files.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Red Hat JBoss Web Server 6.1.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:19810"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\nTo reduced the risk, by disabling or strictly limiting the use of HTTP PUT requests to trusted, authenticated users only. Additionally, administrators should review and adjust URL rewrite rules to ensure they do not manipulate request paths in ways that could expose protected directories such as /WEB-INF/ or /META-INF/. Implementing strict access controls and monitoring for unexpected rewrite or upload behavior can further minimize potential exploitation.",
          "product_ids": [
            "Red Hat JBoss Web Server 6.1.3"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Web Server 6.1.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE"
    },
    {
      "cve": "CVE-2025-61795",
      "cwe": {
        "id": "CWE-404",
        "name": "Improper Resource Shutdown or Release"
      },
      "discovery_date": "2025-10-27T18:01:06.418669+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2406588"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A denial of service flaw has been discovered in Apache Tomcat. If an error occurred (including exceeding limits) during the processing of a multipart upload, temporary copies of the uploaded parts written to disc were not cleaned up immediately but left for the garbage collection process to delete. Depending on JVM settings, application memory usage and application load, it was possible that space for the temporary copies of uploaded parts would be filled faster than GC cleared it, leading to a DoS.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Web Server 6.1.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-61795"
        },
        {
          "category": "external",
          "summary": "RHBZ#2406588",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406588"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-61795",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-61795"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61795",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61795"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/1cdf5f730ede75a0759492f179ac21ca4ff68e06",
          "url": "https://github.com/apache/tomcat/commit/1cdf5f730ede75a0759492f179ac21ca4ff68e06"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/wm9mx8brmx9g4zpywm06ryrtvd3160pp",
          "url": "https://lists.apache.org/thread/wm9mx8brmx9g4zpywm06ryrtvd3160pp"
        }
      ],
      "release_date": "2025-10-27T17:30:28.334000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-11-06T16:24:24+00:00",
          "details": "Before applying the update, back up your existing Red Hat JBoss Web Server installation, including all applications and configuration files.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Red Hat JBoss Web Server 6.1.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:19810"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat JBoss Web Server 6.1.3"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Web Server 6.1.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for tomcat is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.\n\nSecurity Fix(es):\n\n* tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)\n\n* tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service (CVE-2025-61795)\n\n* tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:23051",
        "url": "https://access.redhat.com/errata/RHSA-2025:23051"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2362782",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
      },
      {
        "category": "external",
        "summary": "2406588",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406588"
      },
      {
        "category": "external",
        "summary": "2406591",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23051.json"
      }
    ],
    "title": "Red Hat Security Advisory: tomcat security update",
    "tracking": {
      "current_release_date": "2026-03-18T20:51:44+00:00",
      "generator": {
        "date": "2026-03-18T20:51:44+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.3"
        }
      },
      "id": "RHSA-2025:23051",
      "initial_release_date": "2025-12-10T14:38:53+00:00",
      "revision_history": [
        {
          "date": "2025-12-10T14:38:53+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-12-10T14:38:53+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-03-18T20:51:44+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
                  "product_id": "AppStream-10.0.Z.E2S",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux_eus:10.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat-1:10.1.36-1.el10_0.3.noarch",
                "product": {
                  "name": "tomcat-1:10.1.36-1.el10_0.3.noarch",
                  "product_id": "tomcat-1:10.1.36-1.el10_0.3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat@10.1.36-1.el10_0.3?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-admin-webapps-1:10.1.36-1.el10_0.3.noarch",
                "product": {
                  "name": "tomcat-admin-webapps-1:10.1.36-1.el10_0.3.noarch",
                  "product_id": "tomcat-admin-webapps-1:10.1.36-1.el10_0.3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-admin-webapps@10.1.36-1.el10_0.3?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-docs-webapp-1:10.1.36-1.el10_0.3.noarch",
                "product": {
                  "name": "tomcat-docs-webapp-1:10.1.36-1.el10_0.3.noarch",
                  "product_id": "tomcat-docs-webapp-1:10.1.36-1.el10_0.3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-docs-webapp@10.1.36-1.el10_0.3?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-el-5.0-api-1:10.1.36-1.el10_0.3.noarch",
                "product": {
                  "name": "tomcat-el-5.0-api-1:10.1.36-1.el10_0.3.noarch",
                  "product_id": "tomcat-el-5.0-api-1:10.1.36-1.el10_0.3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-el-5.0-api@10.1.36-1.el10_0.3?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-jsp-3.1-api-1:10.1.36-1.el10_0.3.noarch",
                "product": {
                  "name": "tomcat-jsp-3.1-api-1:10.1.36-1.el10_0.3.noarch",
                  "product_id": "tomcat-jsp-3.1-api-1:10.1.36-1.el10_0.3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-jsp-3.1-api@10.1.36-1.el10_0.3?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-lib-1:10.1.36-1.el10_0.3.noarch",
                "product": {
                  "name": "tomcat-lib-1:10.1.36-1.el10_0.3.noarch",
                  "product_id": "tomcat-lib-1:10.1.36-1.el10_0.3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-lib@10.1.36-1.el10_0.3?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-servlet-6.0-api-1:10.1.36-1.el10_0.3.noarch",
                "product": {
                  "name": "tomcat-servlet-6.0-api-1:10.1.36-1.el10_0.3.noarch",
                  "product_id": "tomcat-servlet-6.0-api-1:10.1.36-1.el10_0.3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-servlet-6.0-api@10.1.36-1.el10_0.3?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-webapps-1:10.1.36-1.el10_0.3.noarch",
                "product": {
                  "name": "tomcat-webapps-1:10.1.36-1.el10_0.3.noarch",
                  "product_id": "tomcat-webapps-1:10.1.36-1.el10_0.3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-webapps@10.1.36-1.el10_0.3?arch=noarch\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat-1:10.1.36-1.el10_0.3.src",
                "product": {
                  "name": "tomcat-1:10.1.36-1.el10_0.3.src",
                  "product_id": "tomcat-1:10.1.36-1.el10_0.3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat@10.1.36-1.el10_0.3?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-1:10.1.36-1.el10_0.3.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:tomcat-1:10.1.36-1.el10_0.3.noarch"
        },
        "product_reference": "tomcat-1:10.1.36-1.el10_0.3.noarch",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-1:10.1.36-1.el10_0.3.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:tomcat-1:10.1.36-1.el10_0.3.src"
        },
        "product_reference": "tomcat-1:10.1.36-1.el10_0.3.src",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-admin-webapps-1:10.1.36-1.el10_0.3.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:tomcat-admin-webapps-1:10.1.36-1.el10_0.3.noarch"
        },
        "product_reference": "tomcat-admin-webapps-1:10.1.36-1.el10_0.3.noarch",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-docs-webapp-1:10.1.36-1.el10_0.3.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:tomcat-docs-webapp-1:10.1.36-1.el10_0.3.noarch"
        },
        "product_reference": "tomcat-docs-webapp-1:10.1.36-1.el10_0.3.noarch",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-el-5.0-api-1:10.1.36-1.el10_0.3.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:tomcat-el-5.0-api-1:10.1.36-1.el10_0.3.noarch"
        },
        "product_reference": "tomcat-el-5.0-api-1:10.1.36-1.el10_0.3.noarch",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-jsp-3.1-api-1:10.1.36-1.el10_0.3.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:tomcat-jsp-3.1-api-1:10.1.36-1.el10_0.3.noarch"
        },
        "product_reference": "tomcat-jsp-3.1-api-1:10.1.36-1.el10_0.3.noarch",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-lib-1:10.1.36-1.el10_0.3.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:tomcat-lib-1:10.1.36-1.el10_0.3.noarch"
        },
        "product_reference": "tomcat-lib-1:10.1.36-1.el10_0.3.noarch",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-servlet-6.0-api-1:10.1.36-1.el10_0.3.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:tomcat-servlet-6.0-api-1:10.1.36-1.el10_0.3.noarch"
        },
        "product_reference": "tomcat-servlet-6.0-api-1:10.1.36-1.el10_0.3.noarch",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-webapps-1:10.1.36-1.el10_0.3.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:tomcat-webapps-1:10.1.36-1.el10_0.3.noarch"
        },
        "product_reference": "tomcat-webapps-1:10.1.36-1.el10_0.3.noarch",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-31651",
      "cwe": {
        "id": "CWE-150",
        "name": "Improper Neutralization of Escape, Meta, or Control Sequences"
      },
      "discovery_date": "2025-04-28T20:00:56.551028+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2362782"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Tomcat\u0027s rewrite rule processing component. This vulnerability allows security constraints to be bypassed via specially crafted HTTP requests when specific, uncommon rewrite rule configurations are in use.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Low severity because it only manifests under a narrow set of conditions involving uncommon and non-default rewrite rule configurations that rely on specific patterns in the raw requestURI, including path parameters. In most deployments, rewrite rules operate on decoded and normalized URIs or are used for non-security-critical purposes like routing. Furthermore, Tomcat\u2019s internal processing already normalizes and removes path parameters (;-delimited) before applying security constraints, meaning any bypass would only be feasible if the rewrite logic directly enforced security (which is a poor practice). The flaw does not allow direct code execution, data leakage, or privilege escalation unless the rewrite rule was explicitly misused as a substitute for proper access control. \n\nIts impact is further mitigated by the fact that rewrite rules are not typically relied upon for access enforcement. As such, while the bug may lead to incorrect rule evaluation under certain edge-case configurations, it does not represent a significant security risk in practice.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.0.Z.E2S:tomcat-1:10.1.36-1.el10_0.3.noarch",
          "AppStream-10.0.Z.E2S:tomcat-1:10.1.36-1.el10_0.3.src",
          "AppStream-10.0.Z.E2S:tomcat-admin-webapps-1:10.1.36-1.el10_0.3.noarch",
          "AppStream-10.0.Z.E2S:tomcat-docs-webapp-1:10.1.36-1.el10_0.3.noarch",
          "AppStream-10.0.Z.E2S:tomcat-el-5.0-api-1:10.1.36-1.el10_0.3.noarch",
          "AppStream-10.0.Z.E2S:tomcat-jsp-3.1-api-1:10.1.36-1.el10_0.3.noarch",
          "AppStream-10.0.Z.E2S:tomcat-lib-1:10.1.36-1.el10_0.3.noarch",
          "AppStream-10.0.Z.E2S:tomcat-servlet-6.0-api-1:10.1.36-1.el10_0.3.noarch",
          "AppStream-10.0.Z.E2S:tomcat-webapps-1:10.1.36-1.el10_0.3.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "RHBZ#2362782",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-31651",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/list.html?announce@tomcat.apache.org",
          "url": "https://lists.apache.org/list.html?announce@tomcat.apache.org"
        }
      ],
      "release_date": "2025-04-28T19:17:21.721000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-10T14:38:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.0.Z.E2S:tomcat-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-1:10.1.36-1.el10_0.3.src",
            "AppStream-10.0.Z.E2S:tomcat-admin-webapps-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-docs-webapp-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-el-5.0-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-jsp-3.1-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-lib-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-servlet-6.0-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-webapps-1:10.1.36-1.el10_0.3.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:23051"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "AppStream-10.0.Z.E2S:tomcat-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-1:10.1.36-1.el10_0.3.src",
            "AppStream-10.0.Z.E2S:tomcat-admin-webapps-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-docs-webapp-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-el-5.0-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-jsp-3.1-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-lib-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-servlet-6.0-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-webapps-1:10.1.36-1.el10_0.3.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.0.Z.E2S:tomcat-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-1:10.1.36-1.el10_0.3.src",
            "AppStream-10.0.Z.E2S:tomcat-admin-webapps-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-docs-webapp-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-el-5.0-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-jsp-3.1-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-lib-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-servlet-6.0-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-webapps-1:10.1.36-1.el10_0.3.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve"
    },
    {
      "cve": "CVE-2025-55752",
      "cwe": {
        "id": "CWE-23",
        "name": "Relative Path Traversal"
      },
      "discovery_date": "2025-10-27T18:01:22.818037+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2406591"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A directory traversal vulnerability in Apache Tomcat caused by improper URL normalization during request rewriting. When specific rewrite rules are used, an attacker could craft a malicious request to bypass access restrictions and reach protected directories such as /WEB-INF/ or /META-INF/. If HTTP PUT requests are also enabled, this flaw could allow the upload of malicious files, potentially leading to remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important rather than Critical because successful exploitation depends on specific, non-default configuration conditions. The flaw only becomes exploitable when both URL rewriting rules that modify the request path are in use and HTTP PUT requests are enabled \u2014 a feature typically restricted to administrative or trusted users. In standard Tomcat deployments, PUT is disabled or tightly controlled, and rewrite configurations rarely expose sensitive paths. Therefore, while the issue could theoretically lead to remote code execution, the limited attack surface and requirement for uncommon setup conditions significantly reduce its overall risk level.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.0.Z.E2S:tomcat-1:10.1.36-1.el10_0.3.noarch",
          "AppStream-10.0.Z.E2S:tomcat-1:10.1.36-1.el10_0.3.src",
          "AppStream-10.0.Z.E2S:tomcat-admin-webapps-1:10.1.36-1.el10_0.3.noarch",
          "AppStream-10.0.Z.E2S:tomcat-docs-webapp-1:10.1.36-1.el10_0.3.noarch",
          "AppStream-10.0.Z.E2S:tomcat-el-5.0-api-1:10.1.36-1.el10_0.3.noarch",
          "AppStream-10.0.Z.E2S:tomcat-jsp-3.1-api-1:10.1.36-1.el10_0.3.noarch",
          "AppStream-10.0.Z.E2S:tomcat-lib-1:10.1.36-1.el10_0.3.noarch",
          "AppStream-10.0.Z.E2S:tomcat-servlet-6.0-api-1:10.1.36-1.el10_0.3.noarch",
          "AppStream-10.0.Z.E2S:tomcat-webapps-1:10.1.36-1.el10_0.3.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "RHBZ#2406591",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55752",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a",
          "url": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog",
          "url": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog"
        }
      ],
      "release_date": "2025-10-27T17:29:56.060000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-10T14:38:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.0.Z.E2S:tomcat-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-1:10.1.36-1.el10_0.3.src",
            "AppStream-10.0.Z.E2S:tomcat-admin-webapps-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-docs-webapp-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-el-5.0-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-jsp-3.1-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-lib-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-servlet-6.0-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-webapps-1:10.1.36-1.el10_0.3.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:23051"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\nTo reduced the risk, by disabling or strictly limiting the use of HTTP PUT requests to trusted, authenticated users only. Additionally, administrators should review and adjust URL rewrite rules to ensure they do not manipulate request paths in ways that could expose protected directories such as /WEB-INF/ or /META-INF/. Implementing strict access controls and monitoring for unexpected rewrite or upload behavior can further minimize potential exploitation.",
          "product_ids": [
            "AppStream-10.0.Z.E2S:tomcat-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-1:10.1.36-1.el10_0.3.src",
            "AppStream-10.0.Z.E2S:tomcat-admin-webapps-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-docs-webapp-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-el-5.0-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-jsp-3.1-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-lib-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-servlet-6.0-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-webapps-1:10.1.36-1.el10_0.3.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.0.Z.E2S:tomcat-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-1:10.1.36-1.el10_0.3.src",
            "AppStream-10.0.Z.E2S:tomcat-admin-webapps-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-docs-webapp-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-el-5.0-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-jsp-3.1-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-lib-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-servlet-6.0-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-webapps-1:10.1.36-1.el10_0.3.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE"
    },
    {
      "cve": "CVE-2025-61795",
      "cwe": {
        "id": "CWE-404",
        "name": "Improper Resource Shutdown or Release"
      },
      "discovery_date": "2025-10-27T18:01:06.418669+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2406588"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A denial of service flaw has been discovered in Apache Tomcat. If an error occurred (including exceeding limits) during the processing of a multipart upload, temporary copies of the uploaded parts written to disc were not cleaned up immediately but left for the garbage collection process to delete. Depending on JVM settings, application memory usage and application load, it was possible that space for the temporary copies of uploaded parts would be filled faster than GC cleared it, leading to a DoS.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.0.Z.E2S:tomcat-1:10.1.36-1.el10_0.3.noarch",
          "AppStream-10.0.Z.E2S:tomcat-1:10.1.36-1.el10_0.3.src",
          "AppStream-10.0.Z.E2S:tomcat-admin-webapps-1:10.1.36-1.el10_0.3.noarch",
          "AppStream-10.0.Z.E2S:tomcat-docs-webapp-1:10.1.36-1.el10_0.3.noarch",
          "AppStream-10.0.Z.E2S:tomcat-el-5.0-api-1:10.1.36-1.el10_0.3.noarch",
          "AppStream-10.0.Z.E2S:tomcat-jsp-3.1-api-1:10.1.36-1.el10_0.3.noarch",
          "AppStream-10.0.Z.E2S:tomcat-lib-1:10.1.36-1.el10_0.3.noarch",
          "AppStream-10.0.Z.E2S:tomcat-servlet-6.0-api-1:10.1.36-1.el10_0.3.noarch",
          "AppStream-10.0.Z.E2S:tomcat-webapps-1:10.1.36-1.el10_0.3.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-61795"
        },
        {
          "category": "external",
          "summary": "RHBZ#2406588",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406588"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-61795",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-61795"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61795",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61795"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/1cdf5f730ede75a0759492f179ac21ca4ff68e06",
          "url": "https://github.com/apache/tomcat/commit/1cdf5f730ede75a0759492f179ac21ca4ff68e06"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/wm9mx8brmx9g4zpywm06ryrtvd3160pp",
          "url": "https://lists.apache.org/thread/wm9mx8brmx9g4zpywm06ryrtvd3160pp"
        }
      ],
      "release_date": "2025-10-27T17:30:28.334000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-10T14:38:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.0.Z.E2S:tomcat-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-1:10.1.36-1.el10_0.3.src",
            "AppStream-10.0.Z.E2S:tomcat-admin-webapps-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-docs-webapp-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-el-5.0-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-jsp-3.1-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-lib-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-servlet-6.0-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-webapps-1:10.1.36-1.el10_0.3.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:23051"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-10.0.Z.E2S:tomcat-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-1:10.1.36-1.el10_0.3.src",
            "AppStream-10.0.Z.E2S:tomcat-admin-webapps-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-docs-webapp-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-el-5.0-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-jsp-3.1-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-lib-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-servlet-6.0-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-webapps-1:10.1.36-1.el10_0.3.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.0.Z.E2S:tomcat-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-1:10.1.36-1.el10_0.3.src",
            "AppStream-10.0.Z.E2S:tomcat-admin-webapps-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-docs-webapp-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-el-5.0-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-jsp-3.1-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-lib-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-servlet-6.0-api-1:10.1.36-1.el10_0.3.noarch",
            "AppStream-10.0.Z.E2S:tomcat-webapps-1:10.1.36-1.el10_0.3.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for pki-servlet-engine is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Tomcat is the servlet engine that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process.  Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.\n\nSecurity Fix(es):\n\n* tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)\n\n* tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:0293",
        "url": "https://access.redhat.com/errata/RHSA-2026:0293"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2362782",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
      },
      {
        "category": "external",
        "summary": "2406591",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0293.json"
      }
    ],
    "title": "Red Hat Security Advisory: pki-servlet-engine security update",
    "tracking": {
      "current_release_date": "2026-03-18T20:51:45+00:00",
      "generator": {
        "date": "2026-03-18T20:51:45+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.3"
        }
      },
      "id": "RHSA-2026:0293",
      "initial_release_date": "2026-01-08T07:28:53+00:00",
      "revision_history": [
        {
          "date": "2026-01-08T07:28:53+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-01-08T07:28:53+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-03-18T20:51:45+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
                  "product_id": "AppStream-9.2.0.Z.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_e4s:9.2::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pki-servlet-4.0-api-1:9.0.50-1.el9_2.3.noarch",
                "product": {
                  "name": "pki-servlet-4.0-api-1:9.0.50-1.el9_2.3.noarch",
                  "product_id": "pki-servlet-4.0-api-1:9.0.50-1.el9_2.3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pki-servlet-4.0-api@9.0.50-1.el9_2.3?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pki-servlet-engine-1:9.0.50-1.el9_2.3.noarch",
                "product": {
                  "name": "pki-servlet-engine-1:9.0.50-1.el9_2.3.noarch",
                  "product_id": "pki-servlet-engine-1:9.0.50-1.el9_2.3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pki-servlet-engine@9.0.50-1.el9_2.3?arch=noarch\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pki-servlet-engine-1:9.0.50-1.el9_2.3.src",
                "product": {
                  "name": "pki-servlet-engine-1:9.0.50-1.el9_2.3.src",
                  "product_id": "pki-servlet-engine-1:9.0.50-1.el9_2.3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pki-servlet-engine@9.0.50-1.el9_2.3?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pki-servlet-4.0-api-1:9.0.50-1.el9_2.3.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:pki-servlet-4.0-api-1:9.0.50-1.el9_2.3.noarch"
        },
        "product_reference": "pki-servlet-4.0-api-1:9.0.50-1.el9_2.3.noarch",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pki-servlet-engine-1:9.0.50-1.el9_2.3.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:pki-servlet-engine-1:9.0.50-1.el9_2.3.noarch"
        },
        "product_reference": "pki-servlet-engine-1:9.0.50-1.el9_2.3.noarch",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pki-servlet-engine-1:9.0.50-1.el9_2.3.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:pki-servlet-engine-1:9.0.50-1.el9_2.3.src"
        },
        "product_reference": "pki-servlet-engine-1:9.0.50-1.el9_2.3.src",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-31651",
      "cwe": {
        "id": "CWE-150",
        "name": "Improper Neutralization of Escape, Meta, or Control Sequences"
      },
      "discovery_date": "2025-04-28T20:00:56.551028+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2362782"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Tomcat\u0027s rewrite rule processing component. This vulnerability allows security constraints to be bypassed via specially crafted HTTP requests when specific, uncommon rewrite rule configurations are in use.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Low severity because it only manifests under a narrow set of conditions involving uncommon and non-default rewrite rule configurations that rely on specific patterns in the raw requestURI, including path parameters. In most deployments, rewrite rules operate on decoded and normalized URIs or are used for non-security-critical purposes like routing. Furthermore, Tomcat\u2019s internal processing already normalizes and removes path parameters (;-delimited) before applying security constraints, meaning any bypass would only be feasible if the rewrite logic directly enforced security (which is a poor practice). The flaw does not allow direct code execution, data leakage, or privilege escalation unless the rewrite rule was explicitly misused as a substitute for proper access control. \n\nIts impact is further mitigated by the fact that rewrite rules are not typically relied upon for access enforcement. As such, while the bug may lead to incorrect rule evaluation under certain edge-case configurations, it does not represent a significant security risk in practice.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:pki-servlet-4.0-api-1:9.0.50-1.el9_2.3.noarch",
          "AppStream-9.2.0.Z.E4S:pki-servlet-engine-1:9.0.50-1.el9_2.3.noarch",
          "AppStream-9.2.0.Z.E4S:pki-servlet-engine-1:9.0.50-1.el9_2.3.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "RHBZ#2362782",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-31651",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/list.html?announce@tomcat.apache.org",
          "url": "https://lists.apache.org/list.html?announce@tomcat.apache.org"
        }
      ],
      "release_date": "2025-04-28T19:17:21.721000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-01-08T07:28:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:pki-servlet-4.0-api-1:9.0.50-1.el9_2.3.noarch",
            "AppStream-9.2.0.Z.E4S:pki-servlet-engine-1:9.0.50-1.el9_2.3.noarch",
            "AppStream-9.2.0.Z.E4S:pki-servlet-engine-1:9.0.50-1.el9_2.3.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:0293"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:pki-servlet-4.0-api-1:9.0.50-1.el9_2.3.noarch",
            "AppStream-9.2.0.Z.E4S:pki-servlet-engine-1:9.0.50-1.el9_2.3.noarch",
            "AppStream-9.2.0.Z.E4S:pki-servlet-engine-1:9.0.50-1.el9_2.3.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:pki-servlet-4.0-api-1:9.0.50-1.el9_2.3.noarch",
            "AppStream-9.2.0.Z.E4S:pki-servlet-engine-1:9.0.50-1.el9_2.3.noarch",
            "AppStream-9.2.0.Z.E4S:pki-servlet-engine-1:9.0.50-1.el9_2.3.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve"
    },
    {
      "cve": "CVE-2025-55752",
      "cwe": {
        "id": "CWE-23",
        "name": "Relative Path Traversal"
      },
      "discovery_date": "2025-10-27T18:01:22.818037+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2406591"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A directory traversal vulnerability in Apache Tomcat caused by improper URL normalization during request rewriting. When specific rewrite rules are used, an attacker could craft a malicious request to bypass access restrictions and reach protected directories such as /WEB-INF/ or /META-INF/. If HTTP PUT requests are also enabled, this flaw could allow the upload of malicious files, potentially leading to remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important rather than Critical because successful exploitation depends on specific, non-default configuration conditions. The flaw only becomes exploitable when both URL rewriting rules that modify the request path are in use and HTTP PUT requests are enabled \u2014 a feature typically restricted to administrative or trusted users. In standard Tomcat deployments, PUT is disabled or tightly controlled, and rewrite configurations rarely expose sensitive paths. Therefore, while the issue could theoretically lead to remote code execution, the limited attack surface and requirement for uncommon setup conditions significantly reduce its overall risk level.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:pki-servlet-4.0-api-1:9.0.50-1.el9_2.3.noarch",
          "AppStream-9.2.0.Z.E4S:pki-servlet-engine-1:9.0.50-1.el9_2.3.noarch",
          "AppStream-9.2.0.Z.E4S:pki-servlet-engine-1:9.0.50-1.el9_2.3.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "RHBZ#2406591",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55752",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a",
          "url": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog",
          "url": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog"
        }
      ],
      "release_date": "2025-10-27T17:29:56.060000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-01-08T07:28:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:pki-servlet-4.0-api-1:9.0.50-1.el9_2.3.noarch",
            "AppStream-9.2.0.Z.E4S:pki-servlet-engine-1:9.0.50-1.el9_2.3.noarch",
            "AppStream-9.2.0.Z.E4S:pki-servlet-engine-1:9.0.50-1.el9_2.3.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:0293"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\nTo reduced the risk, by disabling or strictly limiting the use of HTTP PUT requests to trusted, authenticated users only. Additionally, administrators should review and adjust URL rewrite rules to ensure they do not manipulate request paths in ways that could expose protected directories such as /WEB-INF/ or /META-INF/. Implementing strict access controls and monitoring for unexpected rewrite or upload behavior can further minimize potential exploitation.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:pki-servlet-4.0-api-1:9.0.50-1.el9_2.3.noarch",
            "AppStream-9.2.0.Z.E4S:pki-servlet-engine-1:9.0.50-1.el9_2.3.noarch",
            "AppStream-9.2.0.Z.E4S:pki-servlet-engine-1:9.0.50-1.el9_2.3.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:pki-servlet-4.0-api-1:9.0.50-1.el9_2.3.noarch",
            "AppStream-9.2.0.Z.E4S:pki-servlet-engine-1:9.0.50-1.el9_2.3.noarch",
            "AppStream-9.2.0.Z.E4S:pki-servlet-engine-1:9.0.50-1.el9_2.3.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for tomcat is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.\n\nSecurity Fix(es):\n\n* tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)\n\n* tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:23046",
        "url": "https://access.redhat.com/errata/RHSA-2025:23046"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2362782",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
      },
      {
        "category": "external",
        "summary": "2406591",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23046.json"
      }
    ],
    "title": "Red Hat Security Advisory: tomcat security update",
    "tracking": {
      "current_release_date": "2026-03-18T20:51:42+00:00",
      "generator": {
        "date": "2026-03-18T20:51:42+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.3"
        }
      },
      "id": "RHSA-2025:23046",
      "initial_release_date": "2025-12-10T14:55:18+00:00",
      "revision_history": [
        {
          "date": "2025-12-10T14:55:18+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-12-10T14:55:18+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-03-18T20:51:42+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
                  "product_id": "AppStream-9.2.0.Z.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_e4s:9.2::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat-1:9.0.87-1.el9_2.7.src",
                "product": {
                  "name": "tomcat-1:9.0.87-1.el9_2.7.src",
                  "product_id": "tomcat-1:9.0.87-1.el9_2.7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat@9.0.87-1.el9_2.7?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat-1:9.0.87-1.el9_2.7.noarch",
                "product": {
                  "name": "tomcat-1:9.0.87-1.el9_2.7.noarch",
                  "product_id": "tomcat-1:9.0.87-1.el9_2.7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat@9.0.87-1.el9_2.7?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-admin-webapps-1:9.0.87-1.el9_2.7.noarch",
                "product": {
                  "name": "tomcat-admin-webapps-1:9.0.87-1.el9_2.7.noarch",
                  "product_id": "tomcat-admin-webapps-1:9.0.87-1.el9_2.7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-admin-webapps@9.0.87-1.el9_2.7?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-docs-webapp-1:9.0.87-1.el9_2.7.noarch",
                "product": {
                  "name": "tomcat-docs-webapp-1:9.0.87-1.el9_2.7.noarch",
                  "product_id": "tomcat-docs-webapp-1:9.0.87-1.el9_2.7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-docs-webapp@9.0.87-1.el9_2.7?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-el-3.0-api-1:9.0.87-1.el9_2.7.noarch",
                "product": {
                  "name": "tomcat-el-3.0-api-1:9.0.87-1.el9_2.7.noarch",
                  "product_id": "tomcat-el-3.0-api-1:9.0.87-1.el9_2.7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-el-3.0-api@9.0.87-1.el9_2.7?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-jsp-2.3-api-1:9.0.87-1.el9_2.7.noarch",
                "product": {
                  "name": "tomcat-jsp-2.3-api-1:9.0.87-1.el9_2.7.noarch",
                  "product_id": "tomcat-jsp-2.3-api-1:9.0.87-1.el9_2.7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-jsp-2.3-api@9.0.87-1.el9_2.7?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-lib-1:9.0.87-1.el9_2.7.noarch",
                "product": {
                  "name": "tomcat-lib-1:9.0.87-1.el9_2.7.noarch",
                  "product_id": "tomcat-lib-1:9.0.87-1.el9_2.7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-lib@9.0.87-1.el9_2.7?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-servlet-4.0-api-1:9.0.87-1.el9_2.7.noarch",
                "product": {
                  "name": "tomcat-servlet-4.0-api-1:9.0.87-1.el9_2.7.noarch",
                  "product_id": "tomcat-servlet-4.0-api-1:9.0.87-1.el9_2.7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-servlet-4.0-api@9.0.87-1.el9_2.7?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-webapps-1:9.0.87-1.el9_2.7.noarch",
                "product": {
                  "name": "tomcat-webapps-1:9.0.87-1.el9_2.7.noarch",
                  "product_id": "tomcat-webapps-1:9.0.87-1.el9_2.7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-webapps@9.0.87-1.el9_2.7?arch=noarch\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-1:9.0.87-1.el9_2.7.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:tomcat-1:9.0.87-1.el9_2.7.noarch"
        },
        "product_reference": "tomcat-1:9.0.87-1.el9_2.7.noarch",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-1:9.0.87-1.el9_2.7.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:tomcat-1:9.0.87-1.el9_2.7.src"
        },
        "product_reference": "tomcat-1:9.0.87-1.el9_2.7.src",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-admin-webapps-1:9.0.87-1.el9_2.7.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:tomcat-admin-webapps-1:9.0.87-1.el9_2.7.noarch"
        },
        "product_reference": "tomcat-admin-webapps-1:9.0.87-1.el9_2.7.noarch",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-docs-webapp-1:9.0.87-1.el9_2.7.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:tomcat-docs-webapp-1:9.0.87-1.el9_2.7.noarch"
        },
        "product_reference": "tomcat-docs-webapp-1:9.0.87-1.el9_2.7.noarch",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-el-3.0-api-1:9.0.87-1.el9_2.7.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:tomcat-el-3.0-api-1:9.0.87-1.el9_2.7.noarch"
        },
        "product_reference": "tomcat-el-3.0-api-1:9.0.87-1.el9_2.7.noarch",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-jsp-2.3-api-1:9.0.87-1.el9_2.7.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:tomcat-jsp-2.3-api-1:9.0.87-1.el9_2.7.noarch"
        },
        "product_reference": "tomcat-jsp-2.3-api-1:9.0.87-1.el9_2.7.noarch",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-lib-1:9.0.87-1.el9_2.7.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:tomcat-lib-1:9.0.87-1.el9_2.7.noarch"
        },
        "product_reference": "tomcat-lib-1:9.0.87-1.el9_2.7.noarch",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-servlet-4.0-api-1:9.0.87-1.el9_2.7.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:tomcat-servlet-4.0-api-1:9.0.87-1.el9_2.7.noarch"
        },
        "product_reference": "tomcat-servlet-4.0-api-1:9.0.87-1.el9_2.7.noarch",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-webapps-1:9.0.87-1.el9_2.7.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:tomcat-webapps-1:9.0.87-1.el9_2.7.noarch"
        },
        "product_reference": "tomcat-webapps-1:9.0.87-1.el9_2.7.noarch",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-31651",
      "cwe": {
        "id": "CWE-150",
        "name": "Improper Neutralization of Escape, Meta, or Control Sequences"
      },
      "discovery_date": "2025-04-28T20:00:56.551028+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2362782"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Tomcat\u0027s rewrite rule processing component. This vulnerability allows security constraints to be bypassed via specially crafted HTTP requests when specific, uncommon rewrite rule configurations are in use.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Low severity because it only manifests under a narrow set of conditions involving uncommon and non-default rewrite rule configurations that rely on specific patterns in the raw requestURI, including path parameters. In most deployments, rewrite rules operate on decoded and normalized URIs or are used for non-security-critical purposes like routing. Furthermore, Tomcat\u2019s internal processing already normalizes and removes path parameters (;-delimited) before applying security constraints, meaning any bypass would only be feasible if the rewrite logic directly enforced security (which is a poor practice). The flaw does not allow direct code execution, data leakage, or privilege escalation unless the rewrite rule was explicitly misused as a substitute for proper access control. \n\nIts impact is further mitigated by the fact that rewrite rules are not typically relied upon for access enforcement. As such, while the bug may lead to incorrect rule evaluation under certain edge-case configurations, it does not represent a significant security risk in practice.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:tomcat-1:9.0.87-1.el9_2.7.noarch",
          "AppStream-9.2.0.Z.E4S:tomcat-1:9.0.87-1.el9_2.7.src",
          "AppStream-9.2.0.Z.E4S:tomcat-admin-webapps-1:9.0.87-1.el9_2.7.noarch",
          "AppStream-9.2.0.Z.E4S:tomcat-docs-webapp-1:9.0.87-1.el9_2.7.noarch",
          "AppStream-9.2.0.Z.E4S:tomcat-el-3.0-api-1:9.0.87-1.el9_2.7.noarch",
          "AppStream-9.2.0.Z.E4S:tomcat-jsp-2.3-api-1:9.0.87-1.el9_2.7.noarch",
          "AppStream-9.2.0.Z.E4S:tomcat-lib-1:9.0.87-1.el9_2.7.noarch",
          "AppStream-9.2.0.Z.E4S:tomcat-servlet-4.0-api-1:9.0.87-1.el9_2.7.noarch",
          "AppStream-9.2.0.Z.E4S:tomcat-webapps-1:9.0.87-1.el9_2.7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "RHBZ#2362782",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-31651",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/list.html?announce@tomcat.apache.org",
          "url": "https://lists.apache.org/list.html?announce@tomcat.apache.org"
        }
      ],
      "release_date": "2025-04-28T19:17:21.721000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-10T14:55:18+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:tomcat-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-1:9.0.87-1.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:tomcat-admin-webapps-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-docs-webapp-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-el-3.0-api-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-jsp-2.3-api-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-lib-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-servlet-4.0-api-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-webapps-1:9.0.87-1.el9_2.7.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:23046"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:tomcat-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-1:9.0.87-1.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:tomcat-admin-webapps-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-docs-webapp-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-el-3.0-api-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-jsp-2.3-api-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-lib-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-servlet-4.0-api-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-webapps-1:9.0.87-1.el9_2.7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:tomcat-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-1:9.0.87-1.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:tomcat-admin-webapps-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-docs-webapp-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-el-3.0-api-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-jsp-2.3-api-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-lib-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-servlet-4.0-api-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-webapps-1:9.0.87-1.el9_2.7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve"
    },
    {
      "cve": "CVE-2025-55752",
      "cwe": {
        "id": "CWE-23",
        "name": "Relative Path Traversal"
      },
      "discovery_date": "2025-10-27T18:01:22.818037+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2406591"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A directory traversal vulnerability in Apache Tomcat caused by improper URL normalization during request rewriting. When specific rewrite rules are used, an attacker could craft a malicious request to bypass access restrictions and reach protected directories such as /WEB-INF/ or /META-INF/. If HTTP PUT requests are also enabled, this flaw could allow the upload of malicious files, potentially leading to remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important rather than Critical because successful exploitation depends on specific, non-default configuration conditions. The flaw only becomes exploitable when both URL rewriting rules that modify the request path are in use and HTTP PUT requests are enabled \u2014 a feature typically restricted to administrative or trusted users. In standard Tomcat deployments, PUT is disabled or tightly controlled, and rewrite configurations rarely expose sensitive paths. Therefore, while the issue could theoretically lead to remote code execution, the limited attack surface and requirement for uncommon setup conditions significantly reduce its overall risk level.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:tomcat-1:9.0.87-1.el9_2.7.noarch",
          "AppStream-9.2.0.Z.E4S:tomcat-1:9.0.87-1.el9_2.7.src",
          "AppStream-9.2.0.Z.E4S:tomcat-admin-webapps-1:9.0.87-1.el9_2.7.noarch",
          "AppStream-9.2.0.Z.E4S:tomcat-docs-webapp-1:9.0.87-1.el9_2.7.noarch",
          "AppStream-9.2.0.Z.E4S:tomcat-el-3.0-api-1:9.0.87-1.el9_2.7.noarch",
          "AppStream-9.2.0.Z.E4S:tomcat-jsp-2.3-api-1:9.0.87-1.el9_2.7.noarch",
          "AppStream-9.2.0.Z.E4S:tomcat-lib-1:9.0.87-1.el9_2.7.noarch",
          "AppStream-9.2.0.Z.E4S:tomcat-servlet-4.0-api-1:9.0.87-1.el9_2.7.noarch",
          "AppStream-9.2.0.Z.E4S:tomcat-webapps-1:9.0.87-1.el9_2.7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "RHBZ#2406591",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55752",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a",
          "url": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog",
          "url": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog"
        }
      ],
      "release_date": "2025-10-27T17:29:56.060000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-10T14:55:18+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:tomcat-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-1:9.0.87-1.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:tomcat-admin-webapps-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-docs-webapp-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-el-3.0-api-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-jsp-2.3-api-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-lib-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-servlet-4.0-api-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-webapps-1:9.0.87-1.el9_2.7.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:23046"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\nTo reduced the risk, by disabling or strictly limiting the use of HTTP PUT requests to trusted, authenticated users only. Additionally, administrators should review and adjust URL rewrite rules to ensure they do not manipulate request paths in ways that could expose protected directories such as /WEB-INF/ or /META-INF/. Implementing strict access controls and monitoring for unexpected rewrite or upload behavior can further minimize potential exploitation.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:tomcat-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-1:9.0.87-1.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:tomcat-admin-webapps-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-docs-webapp-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-el-3.0-api-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-jsp-2.3-api-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-lib-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-servlet-4.0-api-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-webapps-1:9.0.87-1.el9_2.7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:tomcat-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-1:9.0.87-1.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:tomcat-admin-webapps-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-docs-webapp-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-el-3.0-api-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-jsp-2.3-api-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-lib-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-servlet-4.0-api-1:9.0.87-1.el9_2.7.noarch",
            "AppStream-9.2.0.Z.E4S:tomcat-webapps-1:9.0.87-1.el9_2.7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for tomcat is now available for Red Hat Enterprise Linux 9.4 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.\n\nSecurity Fix(es):\n\n* tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)\n\n* tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:23047",
        "url": "https://access.redhat.com/errata/RHSA-2025:23047"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2362782",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
      },
      {
        "category": "external",
        "summary": "2406591",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23047.json"
      }
    ],
    "title": "Red Hat Security Advisory: tomcat security update",
    "tracking": {
      "current_release_date": "2026-03-18T20:51:43+00:00",
      "generator": {
        "date": "2026-03-18T20:51:43+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.3"
        }
      },
      "id": "RHSA-2025:23047",
      "initial_release_date": "2025-12-10T15:12:13+00:00",
      "revision_history": [
        {
          "date": "2025-12-10T15:12:13+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-12-10T15:12:13+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-03-18T20:51:43+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream EUS (v.9.4)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream EUS (v.9.4)",
                  "product_id": "AppStream-9.4.0.Z.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_eus:9.4::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat-1:9.0.87-1.el9_4.7.src",
                "product": {
                  "name": "tomcat-1:9.0.87-1.el9_4.7.src",
                  "product_id": "tomcat-1:9.0.87-1.el9_4.7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat@9.0.87-1.el9_4.7?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat-1:9.0.87-1.el9_4.7.noarch",
                "product": {
                  "name": "tomcat-1:9.0.87-1.el9_4.7.noarch",
                  "product_id": "tomcat-1:9.0.87-1.el9_4.7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat@9.0.87-1.el9_4.7?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-admin-webapps-1:9.0.87-1.el9_4.7.noarch",
                "product": {
                  "name": "tomcat-admin-webapps-1:9.0.87-1.el9_4.7.noarch",
                  "product_id": "tomcat-admin-webapps-1:9.0.87-1.el9_4.7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-admin-webapps@9.0.87-1.el9_4.7?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-docs-webapp-1:9.0.87-1.el9_4.7.noarch",
                "product": {
                  "name": "tomcat-docs-webapp-1:9.0.87-1.el9_4.7.noarch",
                  "product_id": "tomcat-docs-webapp-1:9.0.87-1.el9_4.7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-docs-webapp@9.0.87-1.el9_4.7?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-el-3.0-api-1:9.0.87-1.el9_4.7.noarch",
                "product": {
                  "name": "tomcat-el-3.0-api-1:9.0.87-1.el9_4.7.noarch",
                  "product_id": "tomcat-el-3.0-api-1:9.0.87-1.el9_4.7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-el-3.0-api@9.0.87-1.el9_4.7?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-jsp-2.3-api-1:9.0.87-1.el9_4.7.noarch",
                "product": {
                  "name": "tomcat-jsp-2.3-api-1:9.0.87-1.el9_4.7.noarch",
                  "product_id": "tomcat-jsp-2.3-api-1:9.0.87-1.el9_4.7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-jsp-2.3-api@9.0.87-1.el9_4.7?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-lib-1:9.0.87-1.el9_4.7.noarch",
                "product": {
                  "name": "tomcat-lib-1:9.0.87-1.el9_4.7.noarch",
                  "product_id": "tomcat-lib-1:9.0.87-1.el9_4.7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-lib@9.0.87-1.el9_4.7?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-servlet-4.0-api-1:9.0.87-1.el9_4.7.noarch",
                "product": {
                  "name": "tomcat-servlet-4.0-api-1:9.0.87-1.el9_4.7.noarch",
                  "product_id": "tomcat-servlet-4.0-api-1:9.0.87-1.el9_4.7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-servlet-4.0-api@9.0.87-1.el9_4.7?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-webapps-1:9.0.87-1.el9_4.7.noarch",
                "product": {
                  "name": "tomcat-webapps-1:9.0.87-1.el9_4.7.noarch",
                  "product_id": "tomcat-webapps-1:9.0.87-1.el9_4.7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-webapps@9.0.87-1.el9_4.7?arch=noarch\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-1:9.0.87-1.el9_4.7.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:tomcat-1:9.0.87-1.el9_4.7.noarch"
        },
        "product_reference": "tomcat-1:9.0.87-1.el9_4.7.noarch",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-1:9.0.87-1.el9_4.7.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:tomcat-1:9.0.87-1.el9_4.7.src"
        },
        "product_reference": "tomcat-1:9.0.87-1.el9_4.7.src",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-admin-webapps-1:9.0.87-1.el9_4.7.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:tomcat-admin-webapps-1:9.0.87-1.el9_4.7.noarch"
        },
        "product_reference": "tomcat-admin-webapps-1:9.0.87-1.el9_4.7.noarch",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-docs-webapp-1:9.0.87-1.el9_4.7.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:tomcat-docs-webapp-1:9.0.87-1.el9_4.7.noarch"
        },
        "product_reference": "tomcat-docs-webapp-1:9.0.87-1.el9_4.7.noarch",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-el-3.0-api-1:9.0.87-1.el9_4.7.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:tomcat-el-3.0-api-1:9.0.87-1.el9_4.7.noarch"
        },
        "product_reference": "tomcat-el-3.0-api-1:9.0.87-1.el9_4.7.noarch",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-jsp-2.3-api-1:9.0.87-1.el9_4.7.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:tomcat-jsp-2.3-api-1:9.0.87-1.el9_4.7.noarch"
        },
        "product_reference": "tomcat-jsp-2.3-api-1:9.0.87-1.el9_4.7.noarch",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-lib-1:9.0.87-1.el9_4.7.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:tomcat-lib-1:9.0.87-1.el9_4.7.noarch"
        },
        "product_reference": "tomcat-lib-1:9.0.87-1.el9_4.7.noarch",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-servlet-4.0-api-1:9.0.87-1.el9_4.7.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:tomcat-servlet-4.0-api-1:9.0.87-1.el9_4.7.noarch"
        },
        "product_reference": "tomcat-servlet-4.0-api-1:9.0.87-1.el9_4.7.noarch",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-webapps-1:9.0.87-1.el9_4.7.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:tomcat-webapps-1:9.0.87-1.el9_4.7.noarch"
        },
        "product_reference": "tomcat-webapps-1:9.0.87-1.el9_4.7.noarch",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-31651",
      "cwe": {
        "id": "CWE-150",
        "name": "Improper Neutralization of Escape, Meta, or Control Sequences"
      },
      "discovery_date": "2025-04-28T20:00:56.551028+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2362782"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Tomcat\u0027s rewrite rule processing component. This vulnerability allows security constraints to be bypassed via specially crafted HTTP requests when specific, uncommon rewrite rule configurations are in use.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Low severity because it only manifests under a narrow set of conditions involving uncommon and non-default rewrite rule configurations that rely on specific patterns in the raw requestURI, including path parameters. In most deployments, rewrite rules operate on decoded and normalized URIs or are used for non-security-critical purposes like routing. Furthermore, Tomcat\u2019s internal processing already normalizes and removes path parameters (;-delimited) before applying security constraints, meaning any bypass would only be feasible if the rewrite logic directly enforced security (which is a poor practice). The flaw does not allow direct code execution, data leakage, or privilege escalation unless the rewrite rule was explicitly misused as a substitute for proper access control. \n\nIts impact is further mitigated by the fact that rewrite rules are not typically relied upon for access enforcement. As such, while the bug may lead to incorrect rule evaluation under certain edge-case configurations, it does not represent a significant security risk in practice.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.EUS:tomcat-1:9.0.87-1.el9_4.7.noarch",
          "AppStream-9.4.0.Z.EUS:tomcat-1:9.0.87-1.el9_4.7.src",
          "AppStream-9.4.0.Z.EUS:tomcat-admin-webapps-1:9.0.87-1.el9_4.7.noarch",
          "AppStream-9.4.0.Z.EUS:tomcat-docs-webapp-1:9.0.87-1.el9_4.7.noarch",
          "AppStream-9.4.0.Z.EUS:tomcat-el-3.0-api-1:9.0.87-1.el9_4.7.noarch",
          "AppStream-9.4.0.Z.EUS:tomcat-jsp-2.3-api-1:9.0.87-1.el9_4.7.noarch",
          "AppStream-9.4.0.Z.EUS:tomcat-lib-1:9.0.87-1.el9_4.7.noarch",
          "AppStream-9.4.0.Z.EUS:tomcat-servlet-4.0-api-1:9.0.87-1.el9_4.7.noarch",
          "AppStream-9.4.0.Z.EUS:tomcat-webapps-1:9.0.87-1.el9_4.7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "RHBZ#2362782",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-31651",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/list.html?announce@tomcat.apache.org",
          "url": "https://lists.apache.org/list.html?announce@tomcat.apache.org"
        }
      ],
      "release_date": "2025-04-28T19:17:21.721000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-10T15:12:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:tomcat-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-1:9.0.87-1.el9_4.7.src",
            "AppStream-9.4.0.Z.EUS:tomcat-admin-webapps-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-docs-webapp-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-el-3.0-api-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-jsp-2.3-api-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-lib-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-servlet-4.0-api-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-webapps-1:9.0.87-1.el9_4.7.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:23047"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:tomcat-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-1:9.0.87-1.el9_4.7.src",
            "AppStream-9.4.0.Z.EUS:tomcat-admin-webapps-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-docs-webapp-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-el-3.0-api-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-jsp-2.3-api-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-lib-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-servlet-4.0-api-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-webapps-1:9.0.87-1.el9_4.7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.EUS:tomcat-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-1:9.0.87-1.el9_4.7.src",
            "AppStream-9.4.0.Z.EUS:tomcat-admin-webapps-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-docs-webapp-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-el-3.0-api-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-jsp-2.3-api-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-lib-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-servlet-4.0-api-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-webapps-1:9.0.87-1.el9_4.7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve"
    },
    {
      "cve": "CVE-2025-55752",
      "cwe": {
        "id": "CWE-23",
        "name": "Relative Path Traversal"
      },
      "discovery_date": "2025-10-27T18:01:22.818037+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2406591"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A directory traversal vulnerability in Apache Tomcat caused by improper URL normalization during request rewriting. When specific rewrite rules are used, an attacker could craft a malicious request to bypass access restrictions and reach protected directories such as /WEB-INF/ or /META-INF/. If HTTP PUT requests are also enabled, this flaw could allow the upload of malicious files, potentially leading to remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important rather than Critical because successful exploitation depends on specific, non-default configuration conditions. The flaw only becomes exploitable when both URL rewriting rules that modify the request path are in use and HTTP PUT requests are enabled \u2014 a feature typically restricted to administrative or trusted users. In standard Tomcat deployments, PUT is disabled or tightly controlled, and rewrite configurations rarely expose sensitive paths. Therefore, while the issue could theoretically lead to remote code execution, the limited attack surface and requirement for uncommon setup conditions significantly reduce its overall risk level.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.EUS:tomcat-1:9.0.87-1.el9_4.7.noarch",
          "AppStream-9.4.0.Z.EUS:tomcat-1:9.0.87-1.el9_4.7.src",
          "AppStream-9.4.0.Z.EUS:tomcat-admin-webapps-1:9.0.87-1.el9_4.7.noarch",
          "AppStream-9.4.0.Z.EUS:tomcat-docs-webapp-1:9.0.87-1.el9_4.7.noarch",
          "AppStream-9.4.0.Z.EUS:tomcat-el-3.0-api-1:9.0.87-1.el9_4.7.noarch",
          "AppStream-9.4.0.Z.EUS:tomcat-jsp-2.3-api-1:9.0.87-1.el9_4.7.noarch",
          "AppStream-9.4.0.Z.EUS:tomcat-lib-1:9.0.87-1.el9_4.7.noarch",
          "AppStream-9.4.0.Z.EUS:tomcat-servlet-4.0-api-1:9.0.87-1.el9_4.7.noarch",
          "AppStream-9.4.0.Z.EUS:tomcat-webapps-1:9.0.87-1.el9_4.7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "RHBZ#2406591",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55752",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a",
          "url": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog",
          "url": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog"
        }
      ],
      "release_date": "2025-10-27T17:29:56.060000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-10T15:12:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:tomcat-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-1:9.0.87-1.el9_4.7.src",
            "AppStream-9.4.0.Z.EUS:tomcat-admin-webapps-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-docs-webapp-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-el-3.0-api-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-jsp-2.3-api-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-lib-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-servlet-4.0-api-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-webapps-1:9.0.87-1.el9_4.7.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:23047"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\nTo reduced the risk, by disabling or strictly limiting the use of HTTP PUT requests to trusted, authenticated users only. Additionally, administrators should review and adjust URL rewrite rules to ensure they do not manipulate request paths in ways that could expose protected directories such as /WEB-INF/ or /META-INF/. Implementing strict access controls and monitoring for unexpected rewrite or upload behavior can further minimize potential exploitation.",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:tomcat-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-1:9.0.87-1.el9_4.7.src",
            "AppStream-9.4.0.Z.EUS:tomcat-admin-webapps-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-docs-webapp-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-el-3.0-api-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-jsp-2.3-api-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-lib-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-servlet-4.0-api-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-webapps-1:9.0.87-1.el9_4.7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.EUS:tomcat-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-1:9.0.87-1.el9_4.7.src",
            "AppStream-9.4.0.Z.EUS:tomcat-admin-webapps-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-docs-webapp-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-el-3.0-api-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-jsp-2.3-api-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-lib-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-servlet-4.0-api-1:9.0.87-1.el9_4.7.noarch",
            "AppStream-9.4.0.Z.EUS:tomcat-webapps-1:9.0.87-1.el9_4.7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for pki-servlet-engine is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Tomcat is the servlet engine that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process.  Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.\n\nSecurity Fix(es):\n\n* tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)\n\n* tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:0292",
        "url": "https://access.redhat.com/errata/RHSA-2026:0292"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2362782",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
      },
      {
        "category": "external",
        "summary": "2406591",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0292.json"
      }
    ],
    "title": "Red Hat Security Advisory: pki-servlet-engine security update",
    "tracking": {
      "current_release_date": "2026-03-18T20:51:45+00:00",
      "generator": {
        "date": "2026-03-18T20:51:45+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.3"
        }
      },
      "id": "RHSA-2026:0292",
      "initial_release_date": "2026-01-08T07:23:28+00:00",
      "revision_history": [
        {
          "date": "2026-01-08T07:23:28+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-01-08T07:23:28+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-03-18T20:51:45+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream E4S (v.9.0)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream E4S (v.9.0)",
                  "product_id": "AppStream-9.0.0.Z.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_e4s:9.0::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pki-servlet-4.0-api-1:9.0.43-4.el9_0.2.noarch",
                "product": {
                  "name": "pki-servlet-4.0-api-1:9.0.43-4.el9_0.2.noarch",
                  "product_id": "pki-servlet-4.0-api-1:9.0.43-4.el9_0.2.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pki-servlet-4.0-api@9.0.43-4.el9_0.2?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pki-servlet-engine-1:9.0.43-4.el9_0.2.noarch",
                "product": {
                  "name": "pki-servlet-engine-1:9.0.43-4.el9_0.2.noarch",
                  "product_id": "pki-servlet-engine-1:9.0.43-4.el9_0.2.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pki-servlet-engine@9.0.43-4.el9_0.2?arch=noarch\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pki-servlet-engine-1:9.0.43-4.el9_0.2.src",
                "product": {
                  "name": "pki-servlet-engine-1:9.0.43-4.el9_0.2.src",
                  "product_id": "pki-servlet-engine-1:9.0.43-4.el9_0.2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pki-servlet-engine@9.0.43-4.el9_0.2?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pki-servlet-4.0-api-1:9.0.43-4.el9_0.2.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:pki-servlet-4.0-api-1:9.0.43-4.el9_0.2.noarch"
        },
        "product_reference": "pki-servlet-4.0-api-1:9.0.43-4.el9_0.2.noarch",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pki-servlet-engine-1:9.0.43-4.el9_0.2.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:pki-servlet-engine-1:9.0.43-4.el9_0.2.noarch"
        },
        "product_reference": "pki-servlet-engine-1:9.0.43-4.el9_0.2.noarch",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pki-servlet-engine-1:9.0.43-4.el9_0.2.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:pki-servlet-engine-1:9.0.43-4.el9_0.2.src"
        },
        "product_reference": "pki-servlet-engine-1:9.0.43-4.el9_0.2.src",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-31651",
      "cwe": {
        "id": "CWE-150",
        "name": "Improper Neutralization of Escape, Meta, or Control Sequences"
      },
      "discovery_date": "2025-04-28T20:00:56.551028+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2362782"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Tomcat\u0027s rewrite rule processing component. This vulnerability allows security constraints to be bypassed via specially crafted HTTP requests when specific, uncommon rewrite rule configurations are in use.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Low severity because it only manifests under a narrow set of conditions involving uncommon and non-default rewrite rule configurations that rely on specific patterns in the raw requestURI, including path parameters. In most deployments, rewrite rules operate on decoded and normalized URIs or are used for non-security-critical purposes like routing. Furthermore, Tomcat\u2019s internal processing already normalizes and removes path parameters (;-delimited) before applying security constraints, meaning any bypass would only be feasible if the rewrite logic directly enforced security (which is a poor practice). The flaw does not allow direct code execution, data leakage, or privilege escalation unless the rewrite rule was explicitly misused as a substitute for proper access control. \n\nIts impact is further mitigated by the fact that rewrite rules are not typically relied upon for access enforcement. As such, while the bug may lead to incorrect rule evaluation under certain edge-case configurations, it does not represent a significant security risk in practice.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.0.0.Z.E4S:pki-servlet-4.0-api-1:9.0.43-4.el9_0.2.noarch",
          "AppStream-9.0.0.Z.E4S:pki-servlet-engine-1:9.0.43-4.el9_0.2.noarch",
          "AppStream-9.0.0.Z.E4S:pki-servlet-engine-1:9.0.43-4.el9_0.2.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "RHBZ#2362782",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-31651",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/list.html?announce@tomcat.apache.org",
          "url": "https://lists.apache.org/list.html?announce@tomcat.apache.org"
        }
      ],
      "release_date": "2025-04-28T19:17:21.721000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-01-08T07:23:28+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.0.0.Z.E4S:pki-servlet-4.0-api-1:9.0.43-4.el9_0.2.noarch",
            "AppStream-9.0.0.Z.E4S:pki-servlet-engine-1:9.0.43-4.el9_0.2.noarch",
            "AppStream-9.0.0.Z.E4S:pki-servlet-engine-1:9.0.43-4.el9_0.2.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:0292"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "AppStream-9.0.0.Z.E4S:pki-servlet-4.0-api-1:9.0.43-4.el9_0.2.noarch",
            "AppStream-9.0.0.Z.E4S:pki-servlet-engine-1:9.0.43-4.el9_0.2.noarch",
            "AppStream-9.0.0.Z.E4S:pki-servlet-engine-1:9.0.43-4.el9_0.2.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.0.0.Z.E4S:pki-servlet-4.0-api-1:9.0.43-4.el9_0.2.noarch",
            "AppStream-9.0.0.Z.E4S:pki-servlet-engine-1:9.0.43-4.el9_0.2.noarch",
            "AppStream-9.0.0.Z.E4S:pki-servlet-engine-1:9.0.43-4.el9_0.2.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve"
    },
    {
      "cve": "CVE-2025-55752",
      "cwe": {
        "id": "CWE-23",
        "name": "Relative Path Traversal"
      },
      "discovery_date": "2025-10-27T18:01:22.818037+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2406591"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A directory traversal vulnerability in Apache Tomcat caused by improper URL normalization during request rewriting. When specific rewrite rules are used, an attacker could craft a malicious request to bypass access restrictions and reach protected directories such as /WEB-INF/ or /META-INF/. If HTTP PUT requests are also enabled, this flaw could allow the upload of malicious files, potentially leading to remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important rather than Critical because successful exploitation depends on specific, non-default configuration conditions. The flaw only becomes exploitable when both URL rewriting rules that modify the request path are in use and HTTP PUT requests are enabled \u2014 a feature typically restricted to administrative or trusted users. In standard Tomcat deployments, PUT is disabled or tightly controlled, and rewrite configurations rarely expose sensitive paths. Therefore, while the issue could theoretically lead to remote code execution, the limited attack surface and requirement for uncommon setup conditions significantly reduce its overall risk level.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.0.0.Z.E4S:pki-servlet-4.0-api-1:9.0.43-4.el9_0.2.noarch",
          "AppStream-9.0.0.Z.E4S:pki-servlet-engine-1:9.0.43-4.el9_0.2.noarch",
          "AppStream-9.0.0.Z.E4S:pki-servlet-engine-1:9.0.43-4.el9_0.2.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "RHBZ#2406591",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55752",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a",
          "url": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog",
          "url": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog"
        }
      ],
      "release_date": "2025-10-27T17:29:56.060000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-01-08T07:23:28+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.0.0.Z.E4S:pki-servlet-4.0-api-1:9.0.43-4.el9_0.2.noarch",
            "AppStream-9.0.0.Z.E4S:pki-servlet-engine-1:9.0.43-4.el9_0.2.noarch",
            "AppStream-9.0.0.Z.E4S:pki-servlet-engine-1:9.0.43-4.el9_0.2.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:0292"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\nTo reduced the risk, by disabling or strictly limiting the use of HTTP PUT requests to trusted, authenticated users only. Additionally, administrators should review and adjust URL rewrite rules to ensure they do not manipulate request paths in ways that could expose protected directories such as /WEB-INF/ or /META-INF/. Implementing strict access controls and monitoring for unexpected rewrite or upload behavior can further minimize potential exploitation.",
          "product_ids": [
            "AppStream-9.0.0.Z.E4S:pki-servlet-4.0-api-1:9.0.43-4.el9_0.2.noarch",
            "AppStream-9.0.0.Z.E4S:pki-servlet-engine-1:9.0.43-4.el9_0.2.noarch",
            "AppStream-9.0.0.Z.E4S:pki-servlet-engine-1:9.0.43-4.el9_0.2.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.0.0.Z.E4S:pki-servlet-4.0-api-1:9.0.43-4.el9_0.2.noarch",
            "AppStream-9.0.0.Z.E4S:pki-servlet-engine-1:9.0.43-4.el9_0.2.noarch",
            "AppStream-9.0.0.Z.E4S:pki-servlet-engine-1:9.0.43-4.el9_0.2.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for tomcat is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.\n\nSecurity Fix(es):\n\n* tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)\n\n* tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service (CVE-2025-61795)\n\n* tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:23050",
        "url": "https://access.redhat.com/errata/RHSA-2025:23050"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2362782",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
      },
      {
        "category": "external",
        "summary": "2406588",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406588"
      },
      {
        "category": "external",
        "summary": "2406591",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23050.json"
      }
    ],
    "title": "Red Hat Security Advisory: tomcat security update",
    "tracking": {
      "current_release_date": "2026-03-18T20:51:43+00:00",
      "generator": {
        "date": "2026-03-18T20:51:43+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.3"
        }
      },
      "id": "RHSA-2025:23050",
      "initial_release_date": "2025-12-10T14:45:33+00:00",
      "revision_history": [
        {
          "date": "2025-12-10T14:45:33+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-12-10T14:45:33+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-03-18T20:51:43+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                  "product_id": "AppStream-10.1.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat-1:10.1.36-3.el10_1.1.noarch",
                "product": {
                  "name": "tomcat-1:10.1.36-3.el10_1.1.noarch",
                  "product_id": "tomcat-1:10.1.36-3.el10_1.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat@10.1.36-3.el10_1.1?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-admin-webapps-1:10.1.36-3.el10_1.1.noarch",
                "product": {
                  "name": "tomcat-admin-webapps-1:10.1.36-3.el10_1.1.noarch",
                  "product_id": "tomcat-admin-webapps-1:10.1.36-3.el10_1.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-admin-webapps@10.1.36-3.el10_1.1?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-docs-webapp-1:10.1.36-3.el10_1.1.noarch",
                "product": {
                  "name": "tomcat-docs-webapp-1:10.1.36-3.el10_1.1.noarch",
                  "product_id": "tomcat-docs-webapp-1:10.1.36-3.el10_1.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-docs-webapp@10.1.36-3.el10_1.1?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-el-5.0-api-1:10.1.36-3.el10_1.1.noarch",
                "product": {
                  "name": "tomcat-el-5.0-api-1:10.1.36-3.el10_1.1.noarch",
                  "product_id": "tomcat-el-5.0-api-1:10.1.36-3.el10_1.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-el-5.0-api@10.1.36-3.el10_1.1?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-jsp-3.1-api-1:10.1.36-3.el10_1.1.noarch",
                "product": {
                  "name": "tomcat-jsp-3.1-api-1:10.1.36-3.el10_1.1.noarch",
                  "product_id": "tomcat-jsp-3.1-api-1:10.1.36-3.el10_1.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-jsp-3.1-api@10.1.36-3.el10_1.1?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-lib-1:10.1.36-3.el10_1.1.noarch",
                "product": {
                  "name": "tomcat-lib-1:10.1.36-3.el10_1.1.noarch",
                  "product_id": "tomcat-lib-1:10.1.36-3.el10_1.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-lib@10.1.36-3.el10_1.1?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-servlet-6.0-api-1:10.1.36-3.el10_1.1.noarch",
                "product": {
                  "name": "tomcat-servlet-6.0-api-1:10.1.36-3.el10_1.1.noarch",
                  "product_id": "tomcat-servlet-6.0-api-1:10.1.36-3.el10_1.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-servlet-6.0-api@10.1.36-3.el10_1.1?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-webapps-1:10.1.36-3.el10_1.1.noarch",
                "product": {
                  "name": "tomcat-webapps-1:10.1.36-3.el10_1.1.noarch",
                  "product_id": "tomcat-webapps-1:10.1.36-3.el10_1.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-webapps@10.1.36-3.el10_1.1?arch=noarch\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat-1:10.1.36-3.el10_1.1.src",
                "product": {
                  "name": "tomcat-1:10.1.36-3.el10_1.1.src",
                  "product_id": "tomcat-1:10.1.36-3.el10_1.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat@10.1.36-3.el10_1.1?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-1:10.1.36-3.el10_1.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:tomcat-1:10.1.36-3.el10_1.1.noarch"
        },
        "product_reference": "tomcat-1:10.1.36-3.el10_1.1.noarch",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-1:10.1.36-3.el10_1.1.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:tomcat-1:10.1.36-3.el10_1.1.src"
        },
        "product_reference": "tomcat-1:10.1.36-3.el10_1.1.src",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-admin-webapps-1:10.1.36-3.el10_1.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:tomcat-admin-webapps-1:10.1.36-3.el10_1.1.noarch"
        },
        "product_reference": "tomcat-admin-webapps-1:10.1.36-3.el10_1.1.noarch",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-docs-webapp-1:10.1.36-3.el10_1.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:tomcat-docs-webapp-1:10.1.36-3.el10_1.1.noarch"
        },
        "product_reference": "tomcat-docs-webapp-1:10.1.36-3.el10_1.1.noarch",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-el-5.0-api-1:10.1.36-3.el10_1.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:tomcat-el-5.0-api-1:10.1.36-3.el10_1.1.noarch"
        },
        "product_reference": "tomcat-el-5.0-api-1:10.1.36-3.el10_1.1.noarch",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-jsp-3.1-api-1:10.1.36-3.el10_1.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:tomcat-jsp-3.1-api-1:10.1.36-3.el10_1.1.noarch"
        },
        "product_reference": "tomcat-jsp-3.1-api-1:10.1.36-3.el10_1.1.noarch",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-lib-1:10.1.36-3.el10_1.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:tomcat-lib-1:10.1.36-3.el10_1.1.noarch"
        },
        "product_reference": "tomcat-lib-1:10.1.36-3.el10_1.1.noarch",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-servlet-6.0-api-1:10.1.36-3.el10_1.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:tomcat-servlet-6.0-api-1:10.1.36-3.el10_1.1.noarch"
        },
        "product_reference": "tomcat-servlet-6.0-api-1:10.1.36-3.el10_1.1.noarch",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-webapps-1:10.1.36-3.el10_1.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:tomcat-webapps-1:10.1.36-3.el10_1.1.noarch"
        },
        "product_reference": "tomcat-webapps-1:10.1.36-3.el10_1.1.noarch",
        "relates_to_product_reference": "AppStream-10.1.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-31651",
      "cwe": {
        "id": "CWE-150",
        "name": "Improper Neutralization of Escape, Meta, or Control Sequences"
      },
      "discovery_date": "2025-04-28T20:00:56.551028+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2362782"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Tomcat\u0027s rewrite rule processing component. This vulnerability allows security constraints to be bypassed via specially crafted HTTP requests when specific, uncommon rewrite rule configurations are in use.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Low severity because it only manifests under a narrow set of conditions involving uncommon and non-default rewrite rule configurations that rely on specific patterns in the raw requestURI, including path parameters. In most deployments, rewrite rules operate on decoded and normalized URIs or are used for non-security-critical purposes like routing. Furthermore, Tomcat\u2019s internal processing already normalizes and removes path parameters (;-delimited) before applying security constraints, meaning any bypass would only be feasible if the rewrite logic directly enforced security (which is a poor practice). The flaw does not allow direct code execution, data leakage, or privilege escalation unless the rewrite rule was explicitly misused as a substitute for proper access control. \n\nIts impact is further mitigated by the fact that rewrite rules are not typically relied upon for access enforcement. As such, while the bug may lead to incorrect rule evaluation under certain edge-case configurations, it does not represent a significant security risk in practice.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.1.Z:tomcat-1:10.1.36-3.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat-1:10.1.36-3.el10_1.1.src",
          "AppStream-10.1.Z:tomcat-admin-webapps-1:10.1.36-3.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat-docs-webapp-1:10.1.36-3.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat-el-5.0-api-1:10.1.36-3.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat-jsp-3.1-api-1:10.1.36-3.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat-lib-1:10.1.36-3.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat-servlet-6.0-api-1:10.1.36-3.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat-webapps-1:10.1.36-3.el10_1.1.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "RHBZ#2362782",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-31651",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/list.html?announce@tomcat.apache.org",
          "url": "https://lists.apache.org/list.html?announce@tomcat.apache.org"
        }
      ],
      "release_date": "2025-04-28T19:17:21.721000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-10T14:45:33+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.1.Z:tomcat-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-1:10.1.36-3.el10_1.1.src",
            "AppStream-10.1.Z:tomcat-admin-webapps-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-docs-webapp-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-el-5.0-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-jsp-3.1-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-lib-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-servlet-6.0-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-webapps-1:10.1.36-3.el10_1.1.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:23050"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "AppStream-10.1.Z:tomcat-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-1:10.1.36-3.el10_1.1.src",
            "AppStream-10.1.Z:tomcat-admin-webapps-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-docs-webapp-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-el-5.0-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-jsp-3.1-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-lib-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-servlet-6.0-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-webapps-1:10.1.36-3.el10_1.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.1.Z:tomcat-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-1:10.1.36-3.el10_1.1.src",
            "AppStream-10.1.Z:tomcat-admin-webapps-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-docs-webapp-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-el-5.0-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-jsp-3.1-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-lib-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-servlet-6.0-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-webapps-1:10.1.36-3.el10_1.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve"
    },
    {
      "cve": "CVE-2025-55752",
      "cwe": {
        "id": "CWE-23",
        "name": "Relative Path Traversal"
      },
      "discovery_date": "2025-10-27T18:01:22.818037+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2406591"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A directory traversal vulnerability in Apache Tomcat caused by improper URL normalization during request rewriting. When specific rewrite rules are used, an attacker could craft a malicious request to bypass access restrictions and reach protected directories such as /WEB-INF/ or /META-INF/. If HTTP PUT requests are also enabled, this flaw could allow the upload of malicious files, potentially leading to remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important rather than Critical because successful exploitation depends on specific, non-default configuration conditions. The flaw only becomes exploitable when both URL rewriting rules that modify the request path are in use and HTTP PUT requests are enabled \u2014 a feature typically restricted to administrative or trusted users. In standard Tomcat deployments, PUT is disabled or tightly controlled, and rewrite configurations rarely expose sensitive paths. Therefore, while the issue could theoretically lead to remote code execution, the limited attack surface and requirement for uncommon setup conditions significantly reduce its overall risk level.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.1.Z:tomcat-1:10.1.36-3.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat-1:10.1.36-3.el10_1.1.src",
          "AppStream-10.1.Z:tomcat-admin-webapps-1:10.1.36-3.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat-docs-webapp-1:10.1.36-3.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat-el-5.0-api-1:10.1.36-3.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat-jsp-3.1-api-1:10.1.36-3.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat-lib-1:10.1.36-3.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat-servlet-6.0-api-1:10.1.36-3.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat-webapps-1:10.1.36-3.el10_1.1.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "RHBZ#2406591",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55752",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a",
          "url": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog",
          "url": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog"
        }
      ],
      "release_date": "2025-10-27T17:29:56.060000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-10T14:45:33+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.1.Z:tomcat-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-1:10.1.36-3.el10_1.1.src",
            "AppStream-10.1.Z:tomcat-admin-webapps-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-docs-webapp-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-el-5.0-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-jsp-3.1-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-lib-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-servlet-6.0-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-webapps-1:10.1.36-3.el10_1.1.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:23050"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\nTo reduced the risk, by disabling or strictly limiting the use of HTTP PUT requests to trusted, authenticated users only. Additionally, administrators should review and adjust URL rewrite rules to ensure they do not manipulate request paths in ways that could expose protected directories such as /WEB-INF/ or /META-INF/. Implementing strict access controls and monitoring for unexpected rewrite or upload behavior can further minimize potential exploitation.",
          "product_ids": [
            "AppStream-10.1.Z:tomcat-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-1:10.1.36-3.el10_1.1.src",
            "AppStream-10.1.Z:tomcat-admin-webapps-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-docs-webapp-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-el-5.0-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-jsp-3.1-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-lib-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-servlet-6.0-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-webapps-1:10.1.36-3.el10_1.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.1.Z:tomcat-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-1:10.1.36-3.el10_1.1.src",
            "AppStream-10.1.Z:tomcat-admin-webapps-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-docs-webapp-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-el-5.0-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-jsp-3.1-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-lib-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-servlet-6.0-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-webapps-1:10.1.36-3.el10_1.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE"
    },
    {
      "cve": "CVE-2025-61795",
      "cwe": {
        "id": "CWE-404",
        "name": "Improper Resource Shutdown or Release"
      },
      "discovery_date": "2025-10-27T18:01:06.418669+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2406588"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A denial of service flaw has been discovered in Apache Tomcat. If an error occurred (including exceeding limits) during the processing of a multipart upload, temporary copies of the uploaded parts written to disc were not cleaned up immediately but left for the garbage collection process to delete. Depending on JVM settings, application memory usage and application load, it was possible that space for the temporary copies of uploaded parts would be filled faster than GC cleared it, leading to a DoS.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.1.Z:tomcat-1:10.1.36-3.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat-1:10.1.36-3.el10_1.1.src",
          "AppStream-10.1.Z:tomcat-admin-webapps-1:10.1.36-3.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat-docs-webapp-1:10.1.36-3.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat-el-5.0-api-1:10.1.36-3.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat-jsp-3.1-api-1:10.1.36-3.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat-lib-1:10.1.36-3.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat-servlet-6.0-api-1:10.1.36-3.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat-webapps-1:10.1.36-3.el10_1.1.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-61795"
        },
        {
          "category": "external",
          "summary": "RHBZ#2406588",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406588"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-61795",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-61795"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61795",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61795"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/1cdf5f730ede75a0759492f179ac21ca4ff68e06",
          "url": "https://github.com/apache/tomcat/commit/1cdf5f730ede75a0759492f179ac21ca4ff68e06"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/wm9mx8brmx9g4zpywm06ryrtvd3160pp",
          "url": "https://lists.apache.org/thread/wm9mx8brmx9g4zpywm06ryrtvd3160pp"
        }
      ],
      "release_date": "2025-10-27T17:30:28.334000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-10T14:45:33+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.1.Z:tomcat-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-1:10.1.36-3.el10_1.1.src",
            "AppStream-10.1.Z:tomcat-admin-webapps-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-docs-webapp-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-el-5.0-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-jsp-3.1-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-lib-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-servlet-6.0-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-webapps-1:10.1.36-3.el10_1.1.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:23050"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-10.1.Z:tomcat-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-1:10.1.36-3.el10_1.1.src",
            "AppStream-10.1.Z:tomcat-admin-webapps-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-docs-webapp-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-el-5.0-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-jsp-3.1-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-lib-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-servlet-6.0-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-webapps-1:10.1.36-3.el10_1.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.1.Z:tomcat-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-1:10.1.36-3.el10_1.1.src",
            "AppStream-10.1.Z:tomcat-admin-webapps-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-docs-webapp-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-el-5.0-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-jsp-3.1-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-lib-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-servlet-6.0-api-1:10.1.36-3.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat-webapps-1:10.1.36-3.el10_1.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for the pki-deps:10.6 module is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.\n\nSecurity Fix(es):\n\n* tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)\n\n* tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:2725",
        "url": "https://access.redhat.com/errata/RHSA-2026:2725"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2362782",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
      },
      {
        "category": "external",
        "summary": "2406591",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2725.json"
      }
    ],
    "title": "Red Hat Security Advisory: pki-deps:10.6 security update",
    "tracking": {
      "current_release_date": "2026-03-18T20:51:49+00:00",
      "generator": {
        "date": "2026-03-18T20:51:49+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.3"
        }
      },
      "id": "RHSA-2026:2725",
      "initial_release_date": "2026-02-16T11:27:07+00:00",
      "revision_history": [
        {
          "date": "2026-02-16T11:27:07+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-02-16T11:27:07+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-03-18T20:51:49+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
                  "product_id": "AppStream-8.2.0.Z.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_aus:8.2::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apache-commons-collections@3.2.2-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apache-commons-lang@2.6-21.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bea-stax-api@1.2.0-16.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
                "product": {
                  "name": "fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.noarch (pki-deps:10.6)",
                  "product_id": "fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/fasterxml-oss-parent@69-1.module%2Bel8.2.0%2B23390%2B7631bd3f?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/glassfish-fastinfoset@1.2.13-9.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/glassfish-jaxb-api@2.2.12-8.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/glassfish-jaxb-core@2.2.11-11.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/glassfish-jaxb-runtime@2.2.11-11.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/glassfish-jaxb-txw2@2.2.11-11.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch (pki-deps:10.6)",
                  "product_id": "jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-annotations@2.19.1-1.module%2Bel8.2.0%2B23390%2B7631bd3f?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch (pki-deps:10.6)",
                  "product_id": "jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-bom@2.19.1-1.module%2Bel8.2.0%2B23390%2B7631bd3f?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch (pki-deps:10.6)",
                  "product_id": "jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-core@2.19.1-1.module%2Bel8.2.0%2B23390%2B7631bd3f?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch (pki-deps:10.6)",
                  "product_id": "jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-databind@2.19.1-1.module%2Bel8.2.0%2B23390%2B7631bd3f?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch (pki-deps:10.6)",
                  "product_id": "jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-jaxrs-json-provider@2.19.1-1.module%2Bel8.2.0%2B23390%2B7631bd3f?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch (pki-deps:10.6)",
                  "product_id": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-jaxrs-providers@2.19.1-1.module%2Bel8.2.0%2B23390%2B7631bd3f?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch (pki-deps:10.6)",
                  "product_id": "jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-module-jaxb-annotations@2.19.1-1.module%2Bel8.2.0%2B23390%2B7631bd3f?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch (pki-deps:10.6)",
                  "product_id": "jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-modules-base@2.19.1-1.module%2Bel8.2.0%2B23390%2B7631bd3f?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.noarch (pki-deps:10.6)",
                  "product_id": "jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-parent@2.19.2-1.module%2Bel8.2.0%2B23390%2B7631bd3f?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-28.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026epoch=1\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/javassist@3.18.1-8.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/javassist-javadoc@3.18.1-8.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pki-servlet-4.0-api-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch::pki-deps:10.6",
                "product": {
                  "name": "pki-servlet-4.0-api-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch (pki-deps:10.6)",
                  "product_id": "pki-servlet-4.0-api-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pki-servlet-4.0-api@9.0.7-16.module%2Bel8.2.0%2B23940%2Bb159abcc.3?arch=noarch\u0026epoch=1\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch::pki-deps:10.6",
                "product": {
                  "name": "pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch (pki-deps:10.6)",
                  "product_id": "pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pki-servlet-engine@9.0.7-16.module%2Bel8.2.0%2B23940%2Bb159abcc.3?arch=noarch\u0026epoch=1\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/relaxngDatatype@2011.1-7.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.noarch::pki-deps:10.6",
                "product": {
                  "name": "resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.noarch (pki-deps:10.6)",
                  "product_id": "resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/resteasy@3.0.26-3.module%2Bel8.2.0%2B23401%2B65186842?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/slf4j@1.7.25-4.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/slf4j-jdk14@1.7.25-4.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
                "product": {
                  "name": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch (pki-deps:10.6)",
                  "product_id": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/stax-ex@1.7.7-8.module%2Bel8.2.0%2B5723%2B4574fbff?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/velocity@1.7-24.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xalan-j2@2.7.1-38.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xerces-j2@2.11.0-34.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xml-commons-apis@1.4.01-25.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xml-commons-resolver@1.2-26.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
                "product": {
                  "name": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch (pki-deps:10.6)",
                  "product_id": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xmlstreambuffer@1.5.4-8.module%2Bel8.2.0%2B5723%2B4574fbff?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xsom@0-19.20110809svn.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apache-commons-collections@3.2.2-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apache-commons-lang@2.6-21.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bea-stax@1.2.0-16.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
                "product": {
                  "name": "fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.src (pki-deps:10.6)",
                  "product_id": "fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/fasterxml-oss-parent@69-1.module%2Bel8.2.0%2B23390%2B7631bd3f?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/glassfish-fastinfoset@1.2.13-9.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/glassfish-jaxb@2.2.11-11.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/glassfish-jaxb-api@2.2.12-8.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
                "product": {
                  "name": "jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src (pki-deps:10.6)",
                  "product_id": "jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-annotations@2.19.1-1.module%2Bel8.2.0%2B23390%2B7631bd3f?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
                "product": {
                  "name": "jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src (pki-deps:10.6)",
                  "product_id": "jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-bom@2.19.1-1.module%2Bel8.2.0%2B23390%2B7631bd3f?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
                "product": {
                  "name": "jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src (pki-deps:10.6)",
                  "product_id": "jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-core@2.19.1-1.module%2Bel8.2.0%2B23390%2B7631bd3f?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
                "product": {
                  "name": "jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src (pki-deps:10.6)",
                  "product_id": "jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-databind@2.19.1-1.module%2Bel8.2.0%2B23390%2B7631bd3f?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
                "product": {
                  "name": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src (pki-deps:10.6)",
                  "product_id": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-jaxrs-providers@2.19.1-1.module%2Bel8.2.0%2B23390%2B7631bd3f?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
                "product": {
                  "name": "jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src (pki-deps:10.6)",
                  "product_id": "jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-modules-base@2.19.1-1.module%2Bel8.2.0%2B23390%2B7631bd3f?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
                "product": {
                  "name": "jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.src (pki-deps:10.6)",
                  "product_id": "jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-parent@2.19.2-1.module%2Bel8.2.0%2B23390%2B7631bd3f?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-28.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026epoch=1\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/javassist@3.18.1-8.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.src::pki-deps:10.6",
                "product": {
                  "name": "pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.src (pki-deps:10.6)",
                  "product_id": "pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pki-servlet-engine@9.0.7-16.module%2Bel8.2.0%2B23940%2Bb159abcc.3?arch=src\u0026epoch=1\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-nss@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/relaxngDatatype@2011.1-7.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.src::pki-deps:10.6",
                "product": {
                  "name": "resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.src (pki-deps:10.6)",
                  "product_id": "resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/resteasy@3.0.26-3.module%2Bel8.2.0%2B23401%2B65186842?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/slf4j@1.7.25-4.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
                "product": {
                  "name": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src (pki-deps:10.6)",
                  "product_id": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/stax-ex@1.7.7-8.module%2Bel8.2.0%2B5723%2B4574fbff?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/velocity@1.7-24.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xalan-j2@2.7.1-38.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xerces-j2@2.11.0-34.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xml-commons-apis@1.4.01-25.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xml-commons-resolver@1.2-26.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
                "product": {
                  "name": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src (pki-deps:10.6)",
                  "product_id": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xmlstreambuffer@1.5.4-8.module%2Bel8.2.0%2B5723%2B4574fbff?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xsom@0-19.20110809svn.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
                "product": {
                  "name": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6)",
                  "product_id": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-nss-debugsource@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=x86_64\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
                "product": {
                  "name": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6)",
                  "product_id": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-nss-doc@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=x86_64\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
                "product": {
                  "name": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6)",
                  "product_id": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-nss@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=x86_64\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
                "product": {
                  "name": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6)",
                  "product_id": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-nss-debuginfo@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=x86_64\u0026rpmmod=pki-deps:10.6:8020020260128173505:4cda2c84"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6"
        },
        "product_reference": "fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6"
        },
        "product_reference": "fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6"
        },
        "product_reference": "jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6"
        },
        "product_reference": "jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6"
        },
        "product_reference": "jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6"
        },
        "product_reference": "jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6"
        },
        "product_reference": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6"
        },
        "product_reference": "jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6"
        },
        "product_reference": "jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pki-servlet-4.0-api-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:pki-servlet-4.0-api-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch::pki-deps:10.6"
        },
        "product_reference": "pki-servlet-4.0-api-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch::pki-deps:10.6"
        },
        "product_reference": "pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.src::pki-deps:10.6"
        },
        "product_reference": "pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6"
        },
        "product_reference": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6"
        },
        "product_reference": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6"
        },
        "product_reference": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6"
        },
        "product_reference": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.noarch::pki-deps:10.6"
        },
        "product_reference": "resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.src::pki-deps:10.6"
        },
        "product_reference": "resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6"
        },
        "product_reference": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6"
        },
        "product_reference": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6"
        },
        "product_reference": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6"
        },
        "product_reference": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
          "product_id": "AppStream-8.2.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-31651",
      "cwe": {
        "id": "CWE-150",
        "name": "Improper Neutralization of Escape, Meta, or Control Sequences"
      },
      "discovery_date": "2025-04-28T20:00:56.551028+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2362782"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Tomcat\u0027s rewrite rule processing component. This vulnerability allows security constraints to be bypassed via specially crafted HTTP requests when specific, uncommon rewrite rule configurations are in use.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Low severity because it only manifests under a narrow set of conditions involving uncommon and non-default rewrite rule configurations that rely on specific patterns in the raw requestURI, including path parameters. In most deployments, rewrite rules operate on decoded and normalized URIs or are used for non-security-critical purposes like routing. Furthermore, Tomcat\u2019s internal processing already normalizes and removes path parameters (;-delimited) before applying security constraints, meaning any bypass would only be feasible if the rewrite logic directly enforced security (which is a poor practice). The flaw does not allow direct code execution, data leakage, or privilege escalation unless the rewrite rule was explicitly misused as a substitute for proper access control. \n\nIts impact is further mitigated by the fact that rewrite rules are not typically relied upon for access enforcement. As such, while the bug may lead to incorrect rule evaluation under certain edge-case configurations, it does not represent a significant security risk in practice.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.2.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:pki-servlet-4.0-api-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "RHBZ#2362782",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-31651",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/list.html?announce@tomcat.apache.org",
          "url": "https://lists.apache.org/list.html?announce@tomcat.apache.org"
        }
      ],
      "release_date": "2025-04-28T19:17:21.721000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-02-16T11:27:07+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.2.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:pki-servlet-4.0-api-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:2725"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "AppStream-8.2.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:pki-servlet-4.0-api-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.2.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:pki-servlet-4.0-api-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve"
    },
    {
      "cve": "CVE-2025-55752",
      "cwe": {
        "id": "CWE-23",
        "name": "Relative Path Traversal"
      },
      "discovery_date": "2025-10-27T18:01:22.818037+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2406591"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A directory traversal vulnerability in Apache Tomcat caused by improper URL normalization during request rewriting. When specific rewrite rules are used, an attacker could craft a malicious request to bypass access restrictions and reach protected directories such as /WEB-INF/ or /META-INF/. If HTTP PUT requests are also enabled, this flaw could allow the upload of malicious files, potentially leading to remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important rather than Critical because successful exploitation depends on specific, non-default configuration conditions. The flaw only becomes exploitable when both URL rewriting rules that modify the request path are in use and HTTP PUT requests are enabled \u2014 a feature typically restricted to administrative or trusted users. In standard Tomcat deployments, PUT is disabled or tightly controlled, and rewrite configurations rarely expose sensitive paths. Therefore, while the issue could theoretically lead to remote code execution, the limited attack surface and requirement for uncommon setup conditions significantly reduce its overall risk level.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.2.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:pki-servlet-4.0-api-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.2.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "RHBZ#2406591",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55752",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a",
          "url": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog",
          "url": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog"
        }
      ],
      "release_date": "2025-10-27T17:29:56.060000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-02-16T11:27:07+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.2.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:pki-servlet-4.0-api-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:2725"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\nTo reduced the risk, by disabling or strictly limiting the use of HTTP PUT requests to trusted, authenticated users only. Additionally, administrators should review and adjust URL rewrite rules to ensure they do not manipulate request paths in ways that could expose protected directories such as /WEB-INF/ or /META-INF/. Implementing strict access controls and monitoring for unexpected rewrite or upload behavior can further minimize potential exploitation.",
          "product_ids": [
            "AppStream-8.2.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:pki-servlet-4.0-api-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.2.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:fasterxml-oss-parent-0:69-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-core-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.2.0+23390+7631bd3f.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:pki-servlet-4.0-api-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:pki-servlet-engine-1:9.0.7-16.module+el8.2.0+23940+b159abcc.3.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:resteasy-0:3.0.26-3.module+el8.2.0+23401+65186842.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.2.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for the pki-deps:10.6 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.\n\nSecurity Fix(es):\n\n* tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)\n\n* tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:2724",
        "url": "https://access.redhat.com/errata/RHSA-2026:2724"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2362782",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
      },
      {
        "category": "external",
        "summary": "2406591",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2724.json"
      }
    ],
    "title": "Red Hat Security Advisory: pki-deps:10.6 security update",
    "tracking": {
      "current_release_date": "2026-03-18T20:51:47+00:00",
      "generator": {
        "date": "2026-03-18T20:51:47+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.3"
        }
      },
      "id": "RHSA-2026:2724",
      "initial_release_date": "2026-02-16T11:56:58+00:00",
      "revision_history": [
        {
          "date": "2026-02-16T11:56:58+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-02-16T11:56:58+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-03-18T20:51:47+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream AUS (v.8.4)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream AUS (v.8.4)",
                  "product_id": "AppStream-8.4.0.Z.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_aus:8.4::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
                  "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apache-commons-collections@3.2.2-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apache-commons-lang@2.6-21.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
                "product": {
                  "name": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch (pki-deps:10.6)",
                  "product_id": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apache-commons-net@3.6-3.module%2Bel8.3.0%2B6805%2B72837426?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bea-stax-api@1.2.0-16.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
                "product": {
                  "name": "fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6)",
                  "product_id": "fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/fasterxml-oss-parent@69-3.module%2Bel8.4.0%2B23391%2Bb488e6bf?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/glassfish-fastinfoset@1.2.13-9.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/glassfish-jaxb-api@2.2.12-8.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/glassfish-jaxb-core@2.2.11-11.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/glassfish-jaxb-runtime@2.2.11-11.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/glassfish-jaxb-txw2@2.2.11-11.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6)",
                  "product_id": "jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-annotations@2.19.1-2.module%2Bel8.4.0%2B23391%2Bb488e6bf?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6)",
                  "product_id": "jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-bom@2.19.1-1.module%2Bel8.4.0%2B23391%2Bb488e6bf?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6)",
                  "product_id": "jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-core@2.19.1-2.module%2Bel8.4.0%2B23391%2Bb488e6bf?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6)",
                  "product_id": "jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-databind@2.19.1-1.module%2Bel8.4.0%2B23391%2Bb488e6bf?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6)",
                  "product_id": "jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-jaxrs-json-provider@2.19.1-1.module%2Bel8.4.0%2B23391%2Bb488e6bf?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6)",
                  "product_id": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-jaxrs-providers@2.19.1-1.module%2Bel8.4.0%2B23391%2Bb488e6bf?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6)",
                  "product_id": "jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-module-jaxb-annotations@2.19.1-1.module%2Bel8.4.0%2B23391%2Bb488e6bf?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6)",
                  "product_id": "jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-modules-base@2.19.1-1.module%2Bel8.4.0%2B23391%2Bb488e6bf?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6)",
                  "product_id": "jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-parent@2.19.2-1.module%2Bel8.4.0%2B23391%2Bb488e6bf?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-28.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026epoch=1\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/javassist@3.18.1-8.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/javassist-javadoc@3.18.1-8.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pki-servlet-4.0-api-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
                "product": {
                  "name": "pki-servlet-4.0-api-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch (pki-deps:10.6)",
                  "product_id": "pki-servlet-4.0-api-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pki-servlet-4.0-api@9.0.30-1.module%2Bel8.4.0%2B23942%2Bfa6501e9.3?arch=noarch\u0026epoch=1\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
                "product": {
                  "name": "pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch (pki-deps:10.6)",
                  "product_id": "pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pki-servlet-engine@9.0.30-1.module%2Bel8.4.0%2B23942%2Bfa6501e9.3?arch=noarch\u0026epoch=1\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/relaxngDatatype@2011.1-7.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.noarch::pki-deps:10.6",
                "product": {
                  "name": "resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.noarch (pki-deps:10.6)",
                  "product_id": "resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/resteasy@3.0.26-6.module%2Bel8.4.0%2B23399%2Bfc91639f?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/slf4j@1.7.25-4.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/slf4j-jdk14@1.7.25-4.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
                "product": {
                  "name": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch (pki-deps:10.6)",
                  "product_id": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/stax-ex@1.7.7-8.module%2Bel8.2.0%2B5723%2B4574fbff?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/velocity@1.7-24.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xalan-j2@2.7.1-38.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xerces-j2@2.11.0-34.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xml-commons-apis@1.4.01-25.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xml-commons-resolver@1.2-26.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
                "product": {
                  "name": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch (pki-deps:10.6)",
                  "product_id": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xmlstreambuffer@1.5.4-8.module%2Bel8.2.0%2B5723%2B4574fbff?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xsom@0-19.20110809svn.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apache-commons-collections@3.2.2-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apache-commons-lang@2.6-21.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
                "product": {
                  "name": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src (pki-deps:10.6)",
                  "product_id": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apache-commons-net@3.6-3.module%2Bel8.3.0%2B6805%2B72837426?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bea-stax@1.2.0-16.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
                "product": {
                  "name": "fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.src (pki-deps:10.6)",
                  "product_id": "fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/fasterxml-oss-parent@69-3.module%2Bel8.4.0%2B23391%2Bb488e6bf?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/glassfish-fastinfoset@1.2.13-9.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/glassfish-jaxb@2.2.11-11.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/glassfish-jaxb-api@2.2.12-8.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
                "product": {
                  "name": "jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src (pki-deps:10.6)",
                  "product_id": "jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-annotations@2.19.1-2.module%2Bel8.4.0%2B23391%2Bb488e6bf?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
                "product": {
                  "name": "jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src (pki-deps:10.6)",
                  "product_id": "jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-bom@2.19.1-1.module%2Bel8.4.0%2B23391%2Bb488e6bf?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
                "product": {
                  "name": "jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src (pki-deps:10.6)",
                  "product_id": "jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-core@2.19.1-2.module%2Bel8.4.0%2B23391%2Bb488e6bf?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
                "product": {
                  "name": "jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src (pki-deps:10.6)",
                  "product_id": "jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-databind@2.19.1-1.module%2Bel8.4.0%2B23391%2Bb488e6bf?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
                "product": {
                  "name": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src (pki-deps:10.6)",
                  "product_id": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-jaxrs-providers@2.19.1-1.module%2Bel8.4.0%2B23391%2Bb488e6bf?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
                "product": {
                  "name": "jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src (pki-deps:10.6)",
                  "product_id": "jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-modules-base@2.19.1-1.module%2Bel8.4.0%2B23391%2Bb488e6bf?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
                "product": {
                  "name": "jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.src (pki-deps:10.6)",
                  "product_id": "jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-parent@2.19.2-1.module%2Bel8.4.0%2B23391%2Bb488e6bf?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-28.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026epoch=1\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/javassist@3.18.1-8.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.src::pki-deps:10.6",
                "product": {
                  "name": "pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.src (pki-deps:10.6)",
                  "product_id": "pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pki-servlet-engine@9.0.30-1.module%2Bel8.4.0%2B23942%2Bfa6501e9.3?arch=src\u0026epoch=1\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-nss@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/relaxngDatatype@2011.1-7.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.src::pki-deps:10.6",
                "product": {
                  "name": "resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.src (pki-deps:10.6)",
                  "product_id": "resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/resteasy@3.0.26-6.module%2Bel8.4.0%2B23399%2Bfc91639f?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/slf4j@1.7.25-4.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
                "product": {
                  "name": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src (pki-deps:10.6)",
                  "product_id": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/stax-ex@1.7.7-8.module%2Bel8.2.0%2B5723%2B4574fbff?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/velocity@1.7-24.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xalan-j2@2.7.1-38.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xerces-j2@2.11.0-34.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xml-commons-apis@1.4.01-25.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xml-commons-resolver@1.2-26.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
                "product": {
                  "name": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src (pki-deps:10.6)",
                  "product_id": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xmlstreambuffer@1.5.4-8.module%2Bel8.2.0%2B5723%2B4574fbff?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xsom@0-19.20110809svn.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
                "product": {
                  "name": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6)",
                  "product_id": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-nss-debugsource@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=x86_64\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
                "product": {
                  "name": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6)",
                  "product_id": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-nss-doc@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=x86_64\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
                "product": {
                  "name": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6)",
                  "product_id": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-nss@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=x86_64\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
                "product": {
                  "name": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6)",
                  "product_id": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-nss-debuginfo@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=x86_64\u0026rpmmod=pki-deps:10.6:8040020260129154709:522a0ee4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6"
        },
        "product_reference": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6"
        },
        "product_reference": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6"
        },
        "product_reference": "fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6"
        },
        "product_reference": "fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6"
        },
        "product_reference": "jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6"
        },
        "product_reference": "jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6"
        },
        "product_reference": "jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6"
        },
        "product_reference": "jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6"
        },
        "product_reference": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6"
        },
        "product_reference": "jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6"
        },
        "product_reference": "jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pki-servlet-4.0-api-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:pki-servlet-4.0-api-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6"
        },
        "product_reference": "pki-servlet-4.0-api-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6"
        },
        "product_reference": "pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.src::pki-deps:10.6"
        },
        "product_reference": "pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6"
        },
        "product_reference": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6"
        },
        "product_reference": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6"
        },
        "product_reference": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6"
        },
        "product_reference": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.noarch::pki-deps:10.6"
        },
        "product_reference": "resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.src::pki-deps:10.6"
        },
        "product_reference": "resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6"
        },
        "product_reference": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6"
        },
        "product_reference": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6"
        },
        "product_reference": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6"
        },
        "product_reference": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6"
        },
        "product_reference": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6"
        },
        "product_reference": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6"
        },
        "product_reference": "fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6"
        },
        "product_reference": "fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6"
        },
        "product_reference": "jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6"
        },
        "product_reference": "jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6"
        },
        "product_reference": "jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6"
        },
        "product_reference": "jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6"
        },
        "product_reference": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6"
        },
        "product_reference": "jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6"
        },
        "product_reference": "jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pki-servlet-4.0-api-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-4.0-api-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6"
        },
        "product_reference": "pki-servlet-4.0-api-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6"
        },
        "product_reference": "pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.src::pki-deps:10.6"
        },
        "product_reference": "pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6"
        },
        "product_reference": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6"
        },
        "product_reference": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6"
        },
        "product_reference": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6"
        },
        "product_reference": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.noarch::pki-deps:10.6"
        },
        "product_reference": "resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.src::pki-deps:10.6"
        },
        "product_reference": "resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6"
        },
        "product_reference": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6"
        },
        "product_reference": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6"
        },
        "product_reference": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6"
        },
        "product_reference": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-31651",
      "cwe": {
        "id": "CWE-150",
        "name": "Improper Neutralization of Escape, Meta, or Control Sequences"
      },
      "discovery_date": "2025-04-28T20:00:56.551028+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2362782"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Tomcat\u0027s rewrite rule processing component. This vulnerability allows security constraints to be bypassed via specially crafted HTTP requests when specific, uncommon rewrite rule configurations are in use.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Low severity because it only manifests under a narrow set of conditions involving uncommon and non-default rewrite rule configurations that rely on specific patterns in the raw requestURI, including path parameters. In most deployments, rewrite rules operate on decoded and normalized URIs or are used for non-security-critical purposes like routing. Furthermore, Tomcat\u2019s internal processing already normalizes and removes path parameters (;-delimited) before applying security constraints, meaning any bypass would only be feasible if the rewrite logic directly enforced security (which is a poor practice). The flaw does not allow direct code execution, data leakage, or privilege escalation unless the rewrite rule was explicitly misused as a substitute for proper access control. \n\nIts impact is further mitigated by the fact that rewrite rules are not typically relied upon for access enforcement. As such, while the bug may lead to incorrect rule evaluation under certain edge-case configurations, it does not represent a significant security risk in practice.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:pki-servlet-4.0-api-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-4.0-api-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "RHBZ#2362782",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-31651",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/list.html?announce@tomcat.apache.org",
          "url": "https://lists.apache.org/list.html?announce@tomcat.apache.org"
        }
      ],
      "release_date": "2025-04-28T19:17:21.721000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-02-16T11:56:58+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:pki-servlet-4.0-api-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-4.0-api-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:2724"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:pki-servlet-4.0-api-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-4.0-api-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:pki-servlet-4.0-api-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-4.0-api-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve"
    },
    {
      "cve": "CVE-2025-55752",
      "cwe": {
        "id": "CWE-23",
        "name": "Relative Path Traversal"
      },
      "discovery_date": "2025-10-27T18:01:22.818037+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2406591"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A directory traversal vulnerability in Apache Tomcat caused by improper URL normalization during request rewriting. When specific rewrite rules are used, an attacker could craft a malicious request to bypass access restrictions and reach protected directories such as /WEB-INF/ or /META-INF/. If HTTP PUT requests are also enabled, this flaw could allow the upload of malicious files, potentially leading to remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important rather than Critical because successful exploitation depends on specific, non-default configuration conditions. The flaw only becomes exploitable when both URL rewriting rules that modify the request path are in use and HTTP PUT requests are enabled \u2014 a feature typically restricted to administrative or trusted users. In standard Tomcat deployments, PUT is disabled or tightly controlled, and rewrite configurations rarely expose sensitive paths. Therefore, while the issue could theoretically lead to remote code execution, the limited attack surface and requirement for uncommon setup conditions significantly reduce its overall risk level.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:pki-servlet-4.0-api-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-4.0-api-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.4.0.Z.EUS.EXTENSION:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "RHBZ#2406591",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55752",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a",
          "url": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog",
          "url": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog"
        }
      ],
      "release_date": "2025-10-27T17:29:56.060000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-02-16T11:56:58+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:pki-servlet-4.0-api-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-4.0-api-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:2724"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\nTo reduced the risk, by disabling or strictly limiting the use of HTTP PUT requests to trusted, authenticated users only. Additionally, administrators should review and adjust URL rewrite rules to ensure they do not manipulate request paths in ways that could expose protected directories such as /WEB-INF/ or /META-INF/. Implementing strict access controls and monitoring for unexpected rewrite or upload behavior can further minimize potential exploitation.",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:pki-servlet-4.0-api-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-4.0-api-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:pki-servlet-4.0-api-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:fasterxml-oss-parent-0:69-3.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-annotations-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-bom-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-core-0:2.19.1-2.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-databind-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-jaxrs-providers-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-modules-base-0:2.19.1-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jackson-parent-0:2.19.2-1.module+el8.4.0+23391+b488e6bf.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-4.0-api-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:pki-servlet-engine-1:9.0.30-1.module+el8.4.0+23942+fa6501e9.3.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:resteasy-0:3.0.26-6.module+el8.4.0+23399+fc91639f.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.4.0.Z.EUS.EXTENSION:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for tomcat is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.\n\nSecurity Fix(es):\n\n* tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)\n\n* tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:23048",
        "url": "https://access.redhat.com/errata/RHSA-2025:23048"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2362782",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
      },
      {
        "category": "external",
        "summary": "2406591",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23048.json"
      }
    ],
    "title": "Red Hat Security Advisory: tomcat security update",
    "tracking": {
      "current_release_date": "2026-03-18T20:51:43+00:00",
      "generator": {
        "date": "2026-03-18T20:51:43+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.3"
        }
      },
      "id": "RHSA-2025:23048",
      "initial_release_date": "2025-12-10T17:45:03+00:00",
      "revision_history": [
        {
          "date": "2025-12-10T17:45:03+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-12-10T17:45:03+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-03-18T20:51:43+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.10.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat-1:9.0.87-1.el8_10.7.src",
                "product": {
                  "name": "tomcat-1:9.0.87-1.el8_10.7.src",
                  "product_id": "tomcat-1:9.0.87-1.el8_10.7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat@9.0.87-1.el8_10.7?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat-1:9.0.87-1.el8_10.7.noarch",
                "product": {
                  "name": "tomcat-1:9.0.87-1.el8_10.7.noarch",
                  "product_id": "tomcat-1:9.0.87-1.el8_10.7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat@9.0.87-1.el8_10.7?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-admin-webapps-1:9.0.87-1.el8_10.7.noarch",
                "product": {
                  "name": "tomcat-admin-webapps-1:9.0.87-1.el8_10.7.noarch",
                  "product_id": "tomcat-admin-webapps-1:9.0.87-1.el8_10.7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-admin-webapps@9.0.87-1.el8_10.7?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-docs-webapp-1:9.0.87-1.el8_10.7.noarch",
                "product": {
                  "name": "tomcat-docs-webapp-1:9.0.87-1.el8_10.7.noarch",
                  "product_id": "tomcat-docs-webapp-1:9.0.87-1.el8_10.7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-docs-webapp@9.0.87-1.el8_10.7?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-el-3.0-api-1:9.0.87-1.el8_10.7.noarch",
                "product": {
                  "name": "tomcat-el-3.0-api-1:9.0.87-1.el8_10.7.noarch",
                  "product_id": "tomcat-el-3.0-api-1:9.0.87-1.el8_10.7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-el-3.0-api@9.0.87-1.el8_10.7?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-jsp-2.3-api-1:9.0.87-1.el8_10.7.noarch",
                "product": {
                  "name": "tomcat-jsp-2.3-api-1:9.0.87-1.el8_10.7.noarch",
                  "product_id": "tomcat-jsp-2.3-api-1:9.0.87-1.el8_10.7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-jsp-2.3-api@9.0.87-1.el8_10.7?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-lib-1:9.0.87-1.el8_10.7.noarch",
                "product": {
                  "name": "tomcat-lib-1:9.0.87-1.el8_10.7.noarch",
                  "product_id": "tomcat-lib-1:9.0.87-1.el8_10.7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-lib@9.0.87-1.el8_10.7?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-servlet-4.0-api-1:9.0.87-1.el8_10.7.noarch",
                "product": {
                  "name": "tomcat-servlet-4.0-api-1:9.0.87-1.el8_10.7.noarch",
                  "product_id": "tomcat-servlet-4.0-api-1:9.0.87-1.el8_10.7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-servlet-4.0-api@9.0.87-1.el8_10.7?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-webapps-1:9.0.87-1.el8_10.7.noarch",
                "product": {
                  "name": "tomcat-webapps-1:9.0.87-1.el8_10.7.noarch",
                  "product_id": "tomcat-webapps-1:9.0.87-1.el8_10.7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-webapps@9.0.87-1.el8_10.7?arch=noarch\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-1:9.0.87-1.el8_10.7.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:tomcat-1:9.0.87-1.el8_10.7.noarch"
        },
        "product_reference": "tomcat-1:9.0.87-1.el8_10.7.noarch",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-1:9.0.87-1.el8_10.7.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:tomcat-1:9.0.87-1.el8_10.7.src"
        },
        "product_reference": "tomcat-1:9.0.87-1.el8_10.7.src",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-admin-webapps-1:9.0.87-1.el8_10.7.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:tomcat-admin-webapps-1:9.0.87-1.el8_10.7.noarch"
        },
        "product_reference": "tomcat-admin-webapps-1:9.0.87-1.el8_10.7.noarch",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-docs-webapp-1:9.0.87-1.el8_10.7.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:tomcat-docs-webapp-1:9.0.87-1.el8_10.7.noarch"
        },
        "product_reference": "tomcat-docs-webapp-1:9.0.87-1.el8_10.7.noarch",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-el-3.0-api-1:9.0.87-1.el8_10.7.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:tomcat-el-3.0-api-1:9.0.87-1.el8_10.7.noarch"
        },
        "product_reference": "tomcat-el-3.0-api-1:9.0.87-1.el8_10.7.noarch",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-jsp-2.3-api-1:9.0.87-1.el8_10.7.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:tomcat-jsp-2.3-api-1:9.0.87-1.el8_10.7.noarch"
        },
        "product_reference": "tomcat-jsp-2.3-api-1:9.0.87-1.el8_10.7.noarch",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-lib-1:9.0.87-1.el8_10.7.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:tomcat-lib-1:9.0.87-1.el8_10.7.noarch"
        },
        "product_reference": "tomcat-lib-1:9.0.87-1.el8_10.7.noarch",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-servlet-4.0-api-1:9.0.87-1.el8_10.7.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:tomcat-servlet-4.0-api-1:9.0.87-1.el8_10.7.noarch"
        },
        "product_reference": "tomcat-servlet-4.0-api-1:9.0.87-1.el8_10.7.noarch",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-webapps-1:9.0.87-1.el8_10.7.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:tomcat-webapps-1:9.0.87-1.el8_10.7.noarch"
        },
        "product_reference": "tomcat-webapps-1:9.0.87-1.el8_10.7.noarch",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-31651",
      "cwe": {
        "id": "CWE-150",
        "name": "Improper Neutralization of Escape, Meta, or Control Sequences"
      },
      "discovery_date": "2025-04-28T20:00:56.551028+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2362782"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Tomcat\u0027s rewrite rule processing component. This vulnerability allows security constraints to be bypassed via specially crafted HTTP requests when specific, uncommon rewrite rule configurations are in use.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Low severity because it only manifests under a narrow set of conditions involving uncommon and non-default rewrite rule configurations that rely on specific patterns in the raw requestURI, including path parameters. In most deployments, rewrite rules operate on decoded and normalized URIs or are used for non-security-critical purposes like routing. Furthermore, Tomcat\u2019s internal processing already normalizes and removes path parameters (;-delimited) before applying security constraints, meaning any bypass would only be feasible if the rewrite logic directly enforced security (which is a poor practice). The flaw does not allow direct code execution, data leakage, or privilege escalation unless the rewrite rule was explicitly misused as a substitute for proper access control. \n\nIts impact is further mitigated by the fact that rewrite rules are not typically relied upon for access enforcement. As such, while the bug may lead to incorrect rule evaluation under certain edge-case configurations, it does not represent a significant security risk in practice.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.10.0.Z.MAIN.EUS:tomcat-1:9.0.87-1.el8_10.7.noarch",
          "AppStream-8.10.0.Z.MAIN.EUS:tomcat-1:9.0.87-1.el8_10.7.src",
          "AppStream-8.10.0.Z.MAIN.EUS:tomcat-admin-webapps-1:9.0.87-1.el8_10.7.noarch",
          "AppStream-8.10.0.Z.MAIN.EUS:tomcat-docs-webapp-1:9.0.87-1.el8_10.7.noarch",
          "AppStream-8.10.0.Z.MAIN.EUS:tomcat-el-3.0-api-1:9.0.87-1.el8_10.7.noarch",
          "AppStream-8.10.0.Z.MAIN.EUS:tomcat-jsp-2.3-api-1:9.0.87-1.el8_10.7.noarch",
          "AppStream-8.10.0.Z.MAIN.EUS:tomcat-lib-1:9.0.87-1.el8_10.7.noarch",
          "AppStream-8.10.0.Z.MAIN.EUS:tomcat-servlet-4.0-api-1:9.0.87-1.el8_10.7.noarch",
          "AppStream-8.10.0.Z.MAIN.EUS:tomcat-webapps-1:9.0.87-1.el8_10.7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "RHBZ#2362782",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-31651",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/list.html?announce@tomcat.apache.org",
          "url": "https://lists.apache.org/list.html?announce@tomcat.apache.org"
        }
      ],
      "release_date": "2025-04-28T19:17:21.721000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-10T17:45:03+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-1:9.0.87-1.el8_10.7.src",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-admin-webapps-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-docs-webapp-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-el-3.0-api-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-jsp-2.3-api-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-lib-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-servlet-4.0-api-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-webapps-1:9.0.87-1.el8_10.7.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:23048"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-1:9.0.87-1.el8_10.7.src",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-admin-webapps-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-docs-webapp-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-el-3.0-api-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-jsp-2.3-api-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-lib-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-servlet-4.0-api-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-webapps-1:9.0.87-1.el8_10.7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-1:9.0.87-1.el8_10.7.src",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-admin-webapps-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-docs-webapp-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-el-3.0-api-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-jsp-2.3-api-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-lib-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-servlet-4.0-api-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-webapps-1:9.0.87-1.el8_10.7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve"
    },
    {
      "cve": "CVE-2025-55752",
      "cwe": {
        "id": "CWE-23",
        "name": "Relative Path Traversal"
      },
      "discovery_date": "2025-10-27T18:01:22.818037+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2406591"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A directory traversal vulnerability in Apache Tomcat caused by improper URL normalization during request rewriting. When specific rewrite rules are used, an attacker could craft a malicious request to bypass access restrictions and reach protected directories such as /WEB-INF/ or /META-INF/. If HTTP PUT requests are also enabled, this flaw could allow the upload of malicious files, potentially leading to remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important rather than Critical because successful exploitation depends on specific, non-default configuration conditions. The flaw only becomes exploitable when both URL rewriting rules that modify the request path are in use and HTTP PUT requests are enabled \u2014 a feature typically restricted to administrative or trusted users. In standard Tomcat deployments, PUT is disabled or tightly controlled, and rewrite configurations rarely expose sensitive paths. Therefore, while the issue could theoretically lead to remote code execution, the limited attack surface and requirement for uncommon setup conditions significantly reduce its overall risk level.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.10.0.Z.MAIN.EUS:tomcat-1:9.0.87-1.el8_10.7.noarch",
          "AppStream-8.10.0.Z.MAIN.EUS:tomcat-1:9.0.87-1.el8_10.7.src",
          "AppStream-8.10.0.Z.MAIN.EUS:tomcat-admin-webapps-1:9.0.87-1.el8_10.7.noarch",
          "AppStream-8.10.0.Z.MAIN.EUS:tomcat-docs-webapp-1:9.0.87-1.el8_10.7.noarch",
          "AppStream-8.10.0.Z.MAIN.EUS:tomcat-el-3.0-api-1:9.0.87-1.el8_10.7.noarch",
          "AppStream-8.10.0.Z.MAIN.EUS:tomcat-jsp-2.3-api-1:9.0.87-1.el8_10.7.noarch",
          "AppStream-8.10.0.Z.MAIN.EUS:tomcat-lib-1:9.0.87-1.el8_10.7.noarch",
          "AppStream-8.10.0.Z.MAIN.EUS:tomcat-servlet-4.0-api-1:9.0.87-1.el8_10.7.noarch",
          "AppStream-8.10.0.Z.MAIN.EUS:tomcat-webapps-1:9.0.87-1.el8_10.7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "RHBZ#2406591",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55752",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a",
          "url": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog",
          "url": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog"
        }
      ],
      "release_date": "2025-10-27T17:29:56.060000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-10T17:45:03+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-1:9.0.87-1.el8_10.7.src",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-admin-webapps-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-docs-webapp-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-el-3.0-api-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-jsp-2.3-api-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-lib-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-servlet-4.0-api-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-webapps-1:9.0.87-1.el8_10.7.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:23048"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\nTo reduced the risk, by disabling or strictly limiting the use of HTTP PUT requests to trusted, authenticated users only. Additionally, administrators should review and adjust URL rewrite rules to ensure they do not manipulate request paths in ways that could expose protected directories such as /WEB-INF/ or /META-INF/. Implementing strict access controls and monitoring for unexpected rewrite or upload behavior can further minimize potential exploitation.",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-1:9.0.87-1.el8_10.7.src",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-admin-webapps-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-docs-webapp-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-el-3.0-api-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-jsp-2.3-api-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-lib-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-servlet-4.0-api-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-webapps-1:9.0.87-1.el8_10.7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-1:9.0.87-1.el8_10.7.src",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-admin-webapps-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-docs-webapp-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-el-3.0-api-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-jsp-2.3-api-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-lib-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-servlet-4.0-api-1:9.0.87-1.el8_10.7.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:tomcat-webapps-1:9.0.87-1.el8_10.7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update is now available for Red Hat JBoss Web Server 5.8 on Red Hat Enterprise Linux versions 7, 8, and 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.\n\nThis release of Red Hat JBoss Web Server 5.8.6 serves as a replacement for Red Hat JBoss Web Server 5.8.5. This release includes bug fixes, enhancements and component upgrades, which are documented in the Release Notes that are linked to in the References section.\n\nSecurity Fix(es):\n\n* [Minor Incident] tomcat: http/2 \"MadeYouReset\" DoS attack through HTTP/2 control frames [jws-5] (CVE-2025-48989)\n* tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve [jws-5] (CVE-2025-31651)\n* tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE [jws-5] (CVE-2025-55752)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:22925",
        "url": "https://access.redhat.com/errata/RHSA-2025:22925"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_jboss_web_server/5.8/html/red_hat_jboss_web_server_5.8_service_pack_6_release_notes/index",
        "url": "https://docs.redhat.com/en/documentation/red_hat_jboss_web_server/5.8/html/red_hat_jboss_web_server_5.8_service_pack_6_release_notes/index"
      },
      {
        "category": "external",
        "summary": "2362782",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
      },
      {
        "category": "external",
        "summary": "2373309",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2373309"
      },
      {
        "category": "external",
        "summary": "2406591",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22925.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Web Server 5.8.6 release and security update",
    "tracking": {
      "current_release_date": "2026-03-18T20:51:41+00:00",
      "generator": {
        "date": "2026-03-18T20:51:41+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.3"
        }
      },
      "id": "RHSA-2025:22925",
      "initial_release_date": "2025-12-09T15:25:26+00:00",
      "revision_history": [
        {
          "date": "2025-12-09T15:25:26+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-12-09T15:25:26+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-03-18T20:51:41+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Web Server 5.8 for RHEL 7 Server",
                "product": {
                  "name": "Red Hat JBoss Web Server 5.8 for RHEL 7 Server",
                  "product_id": "7Server-JWS-5.8",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:5.8::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat JBoss Web Server 5.8 for RHEL 8",
                "product": {
                  "name": "Red Hat JBoss Web Server 5.8 for RHEL 8",
                  "product_id": "8Base-JWS-5.8",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:5.8::el8"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat JBoss Web Server 5.8 for RHEL 9",
                "product": {
                  "name": "Red Hat JBoss Web Server 5.8 for RHEL 9",
                  "product_id": "9Base-JWS-5.8",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:5.8::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Web Server"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.src",
                "product": {
                  "name": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.src",
                  "product_id": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat@9.0.87-14.redhat_00013.1.el7jws?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.src",
                "product": {
                  "name": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.src",
                  "product_id": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat@9.0.87-14.redhat_00013.1.el8jws?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.src",
                "product": {
                  "name": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.src",
                  "product_id": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat@9.0.87-14.redhat_00013.1.el9jws?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                "product": {
                  "name": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                  "product_id": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat@9.0.87-14.redhat_00013.1.el7jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                "product": {
                  "name": "jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                  "product_id": "jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-admin-webapps@9.0.87-14.redhat_00013.1.el7jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                "product": {
                  "name": "jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                  "product_id": "jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-docs-webapp@9.0.87-14.redhat_00013.1.el7jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                "product": {
                  "name": "jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                  "product_id": "jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-el-3.0-api@9.0.87-14.redhat_00013.1.el7jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-java-jdk11-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                "product": {
                  "name": "jws5-tomcat-java-jdk11-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                  "product_id": "jws5-tomcat-java-jdk11-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-java-jdk11@9.0.87-14.redhat_00013.1.el7jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-java-jdk8-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                "product": {
                  "name": "jws5-tomcat-java-jdk8-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                  "product_id": "jws5-tomcat-java-jdk8-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-java-jdk8@9.0.87-14.redhat_00013.1.el7jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                "product": {
                  "name": "jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                  "product_id": "jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-javadoc@9.0.87-14.redhat_00013.1.el7jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                "product": {
                  "name": "jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                  "product_id": "jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-jsp-2.3-api@9.0.87-14.redhat_00013.1.el7jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                "product": {
                  "name": "jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                  "product_id": "jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-lib@9.0.87-14.redhat_00013.1.el7jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                "product": {
                  "name": "jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                  "product_id": "jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-selinux@9.0.87-14.redhat_00013.1.el7jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                "product": {
                  "name": "jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                  "product_id": "jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-servlet-4.0-api@9.0.87-14.redhat_00013.1.el7jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                "product": {
                  "name": "jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                  "product_id": "jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-webapps@9.0.87-14.redhat_00013.1.el7jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                "product": {
                  "name": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                  "product_id": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat@9.0.87-14.redhat_00013.1.el8jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                "product": {
                  "name": "jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                  "product_id": "jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-admin-webapps@9.0.87-14.redhat_00013.1.el8jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                "product": {
                  "name": "jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                  "product_id": "jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-docs-webapp@9.0.87-14.redhat_00013.1.el8jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                "product": {
                  "name": "jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                  "product_id": "jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-el-3.0-api@9.0.87-14.redhat_00013.1.el8jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                "product": {
                  "name": "jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                  "product_id": "jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-javadoc@9.0.87-14.redhat_00013.1.el8jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                "product": {
                  "name": "jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                  "product_id": "jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-jsp-2.3-api@9.0.87-14.redhat_00013.1.el8jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                "product": {
                  "name": "jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                  "product_id": "jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-lib@9.0.87-14.redhat_00013.1.el8jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                "product": {
                  "name": "jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                  "product_id": "jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-selinux@9.0.87-14.redhat_00013.1.el8jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                "product": {
                  "name": "jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                  "product_id": "jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-servlet-4.0-api@9.0.87-14.redhat_00013.1.el8jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                "product": {
                  "name": "jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                  "product_id": "jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-webapps@9.0.87-14.redhat_00013.1.el8jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                "product": {
                  "name": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                  "product_id": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat@9.0.87-14.redhat_00013.1.el9jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                "product": {
                  "name": "jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                  "product_id": "jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-admin-webapps@9.0.87-14.redhat_00013.1.el9jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                "product": {
                  "name": "jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                  "product_id": "jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-docs-webapp@9.0.87-14.redhat_00013.1.el9jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                "product": {
                  "name": "jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                  "product_id": "jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-el-3.0-api@9.0.87-14.redhat_00013.1.el9jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                "product": {
                  "name": "jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                  "product_id": "jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-javadoc@9.0.87-14.redhat_00013.1.el9jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                "product": {
                  "name": "jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                  "product_id": "jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-jsp-2.3-api@9.0.87-14.redhat_00013.1.el9jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                "product": {
                  "name": "jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                  "product_id": "jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-lib@9.0.87-14.redhat_00013.1.el9jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                "product": {
                  "name": "jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                  "product_id": "jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-selinux@9.0.87-14.redhat_00013.1.el9jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                "product": {
                  "name": "jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                  "product_id": "jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-servlet-4.0-api@9.0.87-14.redhat_00013.1.el9jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                "product": {
                  "name": "jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                  "product_id": "jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws5-tomcat-webapps@9.0.87-14.redhat_00013.1.el9jws?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 7 Server",
          "product_id": "7Server-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.noarch"
        },
        "product_reference": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
        "relates_to_product_reference": "7Server-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.src as a component of Red Hat JBoss Web Server 5.8 for RHEL 7 Server",
          "product_id": "7Server-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.src"
        },
        "product_reference": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.src",
        "relates_to_product_reference": "7Server-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 7 Server",
          "product_id": "7Server-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch"
        },
        "product_reference": "jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
        "relates_to_product_reference": "7Server-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 7 Server",
          "product_id": "7Server-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el7jws.noarch"
        },
        "product_reference": "jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
        "relates_to_product_reference": "7Server-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 7 Server",
          "product_id": "7Server-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch"
        },
        "product_reference": "jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
        "relates_to_product_reference": "7Server-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-java-jdk11-0:9.0.87-14.redhat_00013.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 7 Server",
          "product_id": "7Server-JWS-5.8:jws5-tomcat-java-jdk11-0:9.0.87-14.redhat_00013.1.el7jws.noarch"
        },
        "product_reference": "jws5-tomcat-java-jdk11-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
        "relates_to_product_reference": "7Server-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-java-jdk8-0:9.0.87-14.redhat_00013.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 7 Server",
          "product_id": "7Server-JWS-5.8:jws5-tomcat-java-jdk8-0:9.0.87-14.redhat_00013.1.el7jws.noarch"
        },
        "product_reference": "jws5-tomcat-java-jdk8-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
        "relates_to_product_reference": "7Server-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 7 Server",
          "product_id": "7Server-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el7jws.noarch"
        },
        "product_reference": "jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
        "relates_to_product_reference": "7Server-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 7 Server",
          "product_id": "7Server-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch"
        },
        "product_reference": "jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
        "relates_to_product_reference": "7Server-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 7 Server",
          "product_id": "7Server-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el7jws.noarch"
        },
        "product_reference": "jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
        "relates_to_product_reference": "7Server-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 7 Server",
          "product_id": "7Server-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el7jws.noarch"
        },
        "product_reference": "jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
        "relates_to_product_reference": "7Server-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 7 Server",
          "product_id": "7Server-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch"
        },
        "product_reference": "jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
        "relates_to_product_reference": "7Server-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 7 Server",
          "product_id": "7Server-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch"
        },
        "product_reference": "jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
        "relates_to_product_reference": "7Server-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 8",
          "product_id": "8Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.noarch"
        },
        "product_reference": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
        "relates_to_product_reference": "8Base-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.src as a component of Red Hat JBoss Web Server 5.8 for RHEL 8",
          "product_id": "8Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.src"
        },
        "product_reference": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.src",
        "relates_to_product_reference": "8Base-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 8",
          "product_id": "8Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch"
        },
        "product_reference": "jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
        "relates_to_product_reference": "8Base-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 8",
          "product_id": "8Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el8jws.noarch"
        },
        "product_reference": "jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
        "relates_to_product_reference": "8Base-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 8",
          "product_id": "8Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch"
        },
        "product_reference": "jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
        "relates_to_product_reference": "8Base-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 8",
          "product_id": "8Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el8jws.noarch"
        },
        "product_reference": "jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
        "relates_to_product_reference": "8Base-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 8",
          "product_id": "8Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch"
        },
        "product_reference": "jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
        "relates_to_product_reference": "8Base-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 8",
          "product_id": "8Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el8jws.noarch"
        },
        "product_reference": "jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
        "relates_to_product_reference": "8Base-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 8",
          "product_id": "8Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el8jws.noarch"
        },
        "product_reference": "jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
        "relates_to_product_reference": "8Base-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 8",
          "product_id": "8Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch"
        },
        "product_reference": "jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
        "relates_to_product_reference": "8Base-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 8",
          "product_id": "8Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch"
        },
        "product_reference": "jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
        "relates_to_product_reference": "8Base-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 9",
          "product_id": "9Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.noarch"
        },
        "product_reference": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
        "relates_to_product_reference": "9Base-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.src as a component of Red Hat JBoss Web Server 5.8 for RHEL 9",
          "product_id": "9Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.src"
        },
        "product_reference": "jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.src",
        "relates_to_product_reference": "9Base-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 9",
          "product_id": "9Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch"
        },
        "product_reference": "jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
        "relates_to_product_reference": "9Base-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el9jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 9",
          "product_id": "9Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el9jws.noarch"
        },
        "product_reference": "jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
        "relates_to_product_reference": "9Base-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 9",
          "product_id": "9Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch"
        },
        "product_reference": "jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
        "relates_to_product_reference": "9Base-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el9jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 9",
          "product_id": "9Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el9jws.noarch"
        },
        "product_reference": "jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
        "relates_to_product_reference": "9Base-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 9",
          "product_id": "9Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch"
        },
        "product_reference": "jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
        "relates_to_product_reference": "9Base-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el9jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 9",
          "product_id": "9Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el9jws.noarch"
        },
        "product_reference": "jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
        "relates_to_product_reference": "9Base-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el9jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 9",
          "product_id": "9Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el9jws.noarch"
        },
        "product_reference": "jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
        "relates_to_product_reference": "9Base-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 9",
          "product_id": "9Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch"
        },
        "product_reference": "jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
        "relates_to_product_reference": "9Base-JWS-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch as a component of Red Hat JBoss Web Server 5.8 for RHEL 9",
          "product_id": "9Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch"
        },
        "product_reference": "jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
        "relates_to_product_reference": "9Base-JWS-5.8"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-31651",
      "cwe": {
        "id": "CWE-150",
        "name": "Improper Neutralization of Escape, Meta, or Control Sequences"
      },
      "discovery_date": "2025-04-28T20:00:56.551028+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2362782"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Tomcat\u0027s rewrite rule processing component. This vulnerability allows security constraints to be bypassed via specially crafted HTTP requests when specific, uncommon rewrite rule configurations are in use.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Low severity because it only manifests under a narrow set of conditions involving uncommon and non-default rewrite rule configurations that rely on specific patterns in the raw requestURI, including path parameters. In most deployments, rewrite rules operate on decoded and normalized URIs or are used for non-security-critical purposes like routing. Furthermore, Tomcat\u2019s internal processing already normalizes and removes path parameters (;-delimited) before applying security constraints, meaning any bypass would only be feasible if the rewrite logic directly enforced security (which is a poor practice). The flaw does not allow direct code execution, data leakage, or privilege escalation unless the rewrite rule was explicitly misused as a substitute for proper access control. \n\nIts impact is further mitigated by the fact that rewrite rules are not typically relied upon for access enforcement. As such, while the bug may lead to incorrect rule evaluation under certain edge-case configurations, it does not represent a significant security risk in practice.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.src",
          "7Server-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-java-jdk11-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-java-jdk8-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.src",
          "8Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.src",
          "9Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "RHBZ#2362782",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-31651",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/list.html?announce@tomcat.apache.org",
          "url": "https://lists.apache.org/list.html?announce@tomcat.apache.org"
        }
      ],
      "release_date": "2025-04-28T19:17:21.721000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-09T15:25:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.src",
            "7Server-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-java-jdk11-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-java-jdk8-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.src",
            "8Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.src",
            "9Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:22925"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "7Server-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.src",
            "7Server-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-java-jdk11-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-java-jdk8-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.src",
            "8Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.src",
            "9Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "7Server-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.src",
            "7Server-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-java-jdk11-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-java-jdk8-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.src",
            "8Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.src",
            "9Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve"
    },
    {
      "cve": "CVE-2025-48989",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2025-06-18T08:15:11.266000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2373309"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Tomcat where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the \"MadeYouReset\" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: http/2 \"MadeYouReset\" DoS attack through HTTP/2 control frames",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated with an Important severity. It is simple to exploit because it does not require authentication and could result in a Denial of Service (DoS). While some DoS flaws are classified as Moderate, \u201cMadeYouReset\u201d is Important because of the limited barriers (no specialized tooling or advanced scripting) to exploitation which directly impacts service availability. The vulnerability arises from an implementation weakness in HTTP/2 stream reset handling \u2014 malformed client requests can trigger server-side resets without incrementing abuse counters, allowing an attacker to bypass built-in request throttling and overhead limits. Since these resets consume CPU and memory resources and can be generated at scale over a single TCP/TLS connection, a remote attacker could exhaust server capacity quickly, impacting all legitimate clients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.src",
          "7Server-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-java-jdk11-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-java-jdk8-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.src",
          "8Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.src",
          "9Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-48989"
        },
        {
          "category": "external",
          "summary": "RHBZ#2373309",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2373309"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-48989",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-48989"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-48989",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48989"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/767506",
          "url": "https://kb.cert.org/vuls/id/767506"
        }
      ],
      "release_date": "2025-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-09T15:25:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.src",
            "7Server-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-java-jdk11-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-java-jdk8-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.src",
            "8Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.src",
            "9Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:22925"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "7Server-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.src",
            "7Server-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-java-jdk11-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-java-jdk8-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.src",
            "8Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.src",
            "9Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "7Server-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.src",
            "7Server-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-java-jdk11-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-java-jdk8-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.src",
            "8Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.src",
            "9Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tomcat: http/2 \"MadeYouReset\" DoS attack through HTTP/2 control frames"
    },
    {
      "cve": "CVE-2025-55752",
      "cwe": {
        "id": "CWE-23",
        "name": "Relative Path Traversal"
      },
      "discovery_date": "2025-10-27T18:01:22.818037+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2406591"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A directory traversal vulnerability in Apache Tomcat caused by improper URL normalization during request rewriting. When specific rewrite rules are used, an attacker could craft a malicious request to bypass access restrictions and reach protected directories such as /WEB-INF/ or /META-INF/. If HTTP PUT requests are also enabled, this flaw could allow the upload of malicious files, potentially leading to remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important rather than Critical because successful exploitation depends on specific, non-default configuration conditions. The flaw only becomes exploitable when both URL rewriting rules that modify the request path are in use and HTTP PUT requests are enabled \u2014 a feature typically restricted to administrative or trusted users. In standard Tomcat deployments, PUT is disabled or tightly controlled, and rewrite configurations rarely expose sensitive paths. Therefore, while the issue could theoretically lead to remote code execution, the limited attack surface and requirement for uncommon setup conditions significantly reduce its overall risk level.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.src",
          "7Server-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-java-jdk11-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-java-jdk8-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "7Server-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.src",
          "8Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "8Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.src",
          "9Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
          "9Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "RHBZ#2406591",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55752",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a",
          "url": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog",
          "url": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog"
        }
      ],
      "release_date": "2025-10-27T17:29:56.060000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-09T15:25:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.src",
            "7Server-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-java-jdk11-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-java-jdk8-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.src",
            "8Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.src",
            "9Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:22925"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\nTo reduced the risk, by disabling or strictly limiting the use of HTTP PUT requests to trusted, authenticated users only. Additionally, administrators should review and adjust URL rewrite rules to ensure they do not manipulate request paths in ways that could expose protected directories such as /WEB-INF/ or /META-INF/. Implementing strict access controls and monitoring for unexpected rewrite or upload behavior can further minimize potential exploitation.",
          "product_ids": [
            "7Server-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.src",
            "7Server-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-java-jdk11-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-java-jdk8-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.src",
            "8Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.src",
            "9Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "7Server-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el7jws.src",
            "7Server-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-java-jdk11-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-java-jdk8-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "7Server-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el7jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el8jws.src",
            "8Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "8Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el8jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-0:9.0.87-14.redhat_00013.1.el9jws.src",
            "9Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-14.redhat_00013.1.el9jws.noarch",
            "9Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-14.redhat_00013.1.el9jws.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for tomcat9 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process.  Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.\n\nSecurity Fix(es):\n\n* tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)\n\n* tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:23053",
        "url": "https://access.redhat.com/errata/RHSA-2025:23053"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2362782",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
      },
      {
        "category": "external",
        "summary": "2406591",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23053.json"
      }
    ],
    "title": "Red Hat Security Advisory: tomcat9 security update",
    "tracking": {
      "current_release_date": "2026-03-18T20:51:49+00:00",
      "generator": {
        "date": "2026-03-18T20:51:49+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.3"
        }
      },
      "id": "RHSA-2025:23053",
      "initial_release_date": "2025-12-10T14:39:58+00:00",
      "revision_history": [
        {
          "date": "2025-12-10T14:39:58+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-12-10T14:39:58+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-03-18T20:51:49+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
                  "product_id": "AppStream-10.0.Z.E2S",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux_eus:10.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat9-1:9.0.87-5.el10_0.4.noarch",
                "product": {
                  "name": "tomcat9-1:9.0.87-5.el10_0.4.noarch",
                  "product_id": "tomcat9-1:9.0.87-5.el10_0.4.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9@9.0.87-5.el10_0.4?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat9-admin-webapps-1:9.0.87-5.el10_0.4.noarch",
                "product": {
                  "name": "tomcat9-admin-webapps-1:9.0.87-5.el10_0.4.noarch",
                  "product_id": "tomcat9-admin-webapps-1:9.0.87-5.el10_0.4.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9-admin-webapps@9.0.87-5.el10_0.4?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat9-docs-webapp-1:9.0.87-5.el10_0.4.noarch",
                "product": {
                  "name": "tomcat9-docs-webapp-1:9.0.87-5.el10_0.4.noarch",
                  "product_id": "tomcat9-docs-webapp-1:9.0.87-5.el10_0.4.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9-docs-webapp@9.0.87-5.el10_0.4?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat9-el-3.0-api-1:9.0.87-5.el10_0.4.noarch",
                "product": {
                  "name": "tomcat9-el-3.0-api-1:9.0.87-5.el10_0.4.noarch",
                  "product_id": "tomcat9-el-3.0-api-1:9.0.87-5.el10_0.4.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9-el-3.0-api@9.0.87-5.el10_0.4?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat9-jsp-2.3-api-1:9.0.87-5.el10_0.4.noarch",
                "product": {
                  "name": "tomcat9-jsp-2.3-api-1:9.0.87-5.el10_0.4.noarch",
                  "product_id": "tomcat9-jsp-2.3-api-1:9.0.87-5.el10_0.4.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9-jsp-2.3-api@9.0.87-5.el10_0.4?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat9-lib-1:9.0.87-5.el10_0.4.noarch",
                "product": {
                  "name": "tomcat9-lib-1:9.0.87-5.el10_0.4.noarch",
                  "product_id": "tomcat9-lib-1:9.0.87-5.el10_0.4.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9-lib@9.0.87-5.el10_0.4?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat9-servlet-4.0-api-1:9.0.87-5.el10_0.4.noarch",
                "product": {
                  "name": "tomcat9-servlet-4.0-api-1:9.0.87-5.el10_0.4.noarch",
                  "product_id": "tomcat9-servlet-4.0-api-1:9.0.87-5.el10_0.4.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9-servlet-4.0-api@9.0.87-5.el10_0.4?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat9-webapps-1:9.0.87-5.el10_0.4.noarch",
                "product": {
                  "name": "tomcat9-webapps-1:9.0.87-5.el10_0.4.noarch",
                  "product_id": "tomcat9-webapps-1:9.0.87-5.el10_0.4.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9-webapps@9.0.87-5.el10_0.4?arch=noarch\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat9-1:9.0.87-5.el10_0.4.src",
                "product": {
                  "name": "tomcat9-1:9.0.87-5.el10_0.4.src",
                  "product_id": "tomcat9-1:9.0.87-5.el10_0.4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9@9.0.87-5.el10_0.4?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-1:9.0.87-5.el10_0.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:tomcat9-1:9.0.87-5.el10_0.4.noarch"
        },
        "product_reference": "tomcat9-1:9.0.87-5.el10_0.4.noarch",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-1:9.0.87-5.el10_0.4.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:tomcat9-1:9.0.87-5.el10_0.4.src"
        },
        "product_reference": "tomcat9-1:9.0.87-5.el10_0.4.src",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-admin-webapps-1:9.0.87-5.el10_0.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:tomcat9-admin-webapps-1:9.0.87-5.el10_0.4.noarch"
        },
        "product_reference": "tomcat9-admin-webapps-1:9.0.87-5.el10_0.4.noarch",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-docs-webapp-1:9.0.87-5.el10_0.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:tomcat9-docs-webapp-1:9.0.87-5.el10_0.4.noarch"
        },
        "product_reference": "tomcat9-docs-webapp-1:9.0.87-5.el10_0.4.noarch",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-el-3.0-api-1:9.0.87-5.el10_0.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:tomcat9-el-3.0-api-1:9.0.87-5.el10_0.4.noarch"
        },
        "product_reference": "tomcat9-el-3.0-api-1:9.0.87-5.el10_0.4.noarch",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-jsp-2.3-api-1:9.0.87-5.el10_0.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:tomcat9-jsp-2.3-api-1:9.0.87-5.el10_0.4.noarch"
        },
        "product_reference": "tomcat9-jsp-2.3-api-1:9.0.87-5.el10_0.4.noarch",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-lib-1:9.0.87-5.el10_0.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:tomcat9-lib-1:9.0.87-5.el10_0.4.noarch"
        },
        "product_reference": "tomcat9-lib-1:9.0.87-5.el10_0.4.noarch",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-servlet-4.0-api-1:9.0.87-5.el10_0.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:tomcat9-servlet-4.0-api-1:9.0.87-5.el10_0.4.noarch"
        },
        "product_reference": "tomcat9-servlet-4.0-api-1:9.0.87-5.el10_0.4.noarch",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-webapps-1:9.0.87-5.el10_0.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:tomcat9-webapps-1:9.0.87-5.el10_0.4.noarch"
        },
        "product_reference": "tomcat9-webapps-1:9.0.87-5.el10_0.4.noarch",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-31651",
      "cwe": {
        "id": "CWE-150",
        "name": "Improper Neutralization of Escape, Meta, or Control Sequences"
      },
      "discovery_date": "2025-04-28T20:00:56.551028+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2362782"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Tomcat\u0027s rewrite rule processing component. This vulnerability allows security constraints to be bypassed via specially crafted HTTP requests when specific, uncommon rewrite rule configurations are in use.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Low severity because it only manifests under a narrow set of conditions involving uncommon and non-default rewrite rule configurations that rely on specific patterns in the raw requestURI, including path parameters. In most deployments, rewrite rules operate on decoded and normalized URIs or are used for non-security-critical purposes like routing. Furthermore, Tomcat\u2019s internal processing already normalizes and removes path parameters (;-delimited) before applying security constraints, meaning any bypass would only be feasible if the rewrite logic directly enforced security (which is a poor practice). The flaw does not allow direct code execution, data leakage, or privilege escalation unless the rewrite rule was explicitly misused as a substitute for proper access control. \n\nIts impact is further mitigated by the fact that rewrite rules are not typically relied upon for access enforcement. As such, while the bug may lead to incorrect rule evaluation under certain edge-case configurations, it does not represent a significant security risk in practice.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.0.Z.E2S:tomcat9-1:9.0.87-5.el10_0.4.noarch",
          "AppStream-10.0.Z.E2S:tomcat9-1:9.0.87-5.el10_0.4.src",
          "AppStream-10.0.Z.E2S:tomcat9-admin-webapps-1:9.0.87-5.el10_0.4.noarch",
          "AppStream-10.0.Z.E2S:tomcat9-docs-webapp-1:9.0.87-5.el10_0.4.noarch",
          "AppStream-10.0.Z.E2S:tomcat9-el-3.0-api-1:9.0.87-5.el10_0.4.noarch",
          "AppStream-10.0.Z.E2S:tomcat9-jsp-2.3-api-1:9.0.87-5.el10_0.4.noarch",
          "AppStream-10.0.Z.E2S:tomcat9-lib-1:9.0.87-5.el10_0.4.noarch",
          "AppStream-10.0.Z.E2S:tomcat9-servlet-4.0-api-1:9.0.87-5.el10_0.4.noarch",
          "AppStream-10.0.Z.E2S:tomcat9-webapps-1:9.0.87-5.el10_0.4.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "RHBZ#2362782",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-31651",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/list.html?announce@tomcat.apache.org",
          "url": "https://lists.apache.org/list.html?announce@tomcat.apache.org"
        }
      ],
      "release_date": "2025-04-28T19:17:21.721000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-10T14:39:58+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.0.Z.E2S:tomcat9-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-1:9.0.87-5.el10_0.4.src",
            "AppStream-10.0.Z.E2S:tomcat9-admin-webapps-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-docs-webapp-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-el-3.0-api-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-jsp-2.3-api-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-lib-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-servlet-4.0-api-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-webapps-1:9.0.87-5.el10_0.4.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:23053"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "AppStream-10.0.Z.E2S:tomcat9-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-1:9.0.87-5.el10_0.4.src",
            "AppStream-10.0.Z.E2S:tomcat9-admin-webapps-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-docs-webapp-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-el-3.0-api-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-jsp-2.3-api-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-lib-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-servlet-4.0-api-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-webapps-1:9.0.87-5.el10_0.4.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.0.Z.E2S:tomcat9-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-1:9.0.87-5.el10_0.4.src",
            "AppStream-10.0.Z.E2S:tomcat9-admin-webapps-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-docs-webapp-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-el-3.0-api-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-jsp-2.3-api-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-lib-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-servlet-4.0-api-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-webapps-1:9.0.87-5.el10_0.4.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve"
    },
    {
      "cve": "CVE-2025-55752",
      "cwe": {
        "id": "CWE-23",
        "name": "Relative Path Traversal"
      },
      "discovery_date": "2025-10-27T18:01:22.818037+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2406591"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A directory traversal vulnerability in Apache Tomcat caused by improper URL normalization during request rewriting. When specific rewrite rules are used, an attacker could craft a malicious request to bypass access restrictions and reach protected directories such as /WEB-INF/ or /META-INF/. If HTTP PUT requests are also enabled, this flaw could allow the upload of malicious files, potentially leading to remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important rather than Critical because successful exploitation depends on specific, non-default configuration conditions. The flaw only becomes exploitable when both URL rewriting rules that modify the request path are in use and HTTP PUT requests are enabled \u2014 a feature typically restricted to administrative or trusted users. In standard Tomcat deployments, PUT is disabled or tightly controlled, and rewrite configurations rarely expose sensitive paths. Therefore, while the issue could theoretically lead to remote code execution, the limited attack surface and requirement for uncommon setup conditions significantly reduce its overall risk level.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.0.Z.E2S:tomcat9-1:9.0.87-5.el10_0.4.noarch",
          "AppStream-10.0.Z.E2S:tomcat9-1:9.0.87-5.el10_0.4.src",
          "AppStream-10.0.Z.E2S:tomcat9-admin-webapps-1:9.0.87-5.el10_0.4.noarch",
          "AppStream-10.0.Z.E2S:tomcat9-docs-webapp-1:9.0.87-5.el10_0.4.noarch",
          "AppStream-10.0.Z.E2S:tomcat9-el-3.0-api-1:9.0.87-5.el10_0.4.noarch",
          "AppStream-10.0.Z.E2S:tomcat9-jsp-2.3-api-1:9.0.87-5.el10_0.4.noarch",
          "AppStream-10.0.Z.E2S:tomcat9-lib-1:9.0.87-5.el10_0.4.noarch",
          "AppStream-10.0.Z.E2S:tomcat9-servlet-4.0-api-1:9.0.87-5.el10_0.4.noarch",
          "AppStream-10.0.Z.E2S:tomcat9-webapps-1:9.0.87-5.el10_0.4.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "RHBZ#2406591",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55752",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a",
          "url": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog",
          "url": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog"
        }
      ],
      "release_date": "2025-10-27T17:29:56.060000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-10T14:39:58+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.0.Z.E2S:tomcat9-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-1:9.0.87-5.el10_0.4.src",
            "AppStream-10.0.Z.E2S:tomcat9-admin-webapps-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-docs-webapp-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-el-3.0-api-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-jsp-2.3-api-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-lib-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-servlet-4.0-api-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-webapps-1:9.0.87-5.el10_0.4.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:23053"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\nTo reduced the risk, by disabling or strictly limiting the use of HTTP PUT requests to trusted, authenticated users only. Additionally, administrators should review and adjust URL rewrite rules to ensure they do not manipulate request paths in ways that could expose protected directories such as /WEB-INF/ or /META-INF/. Implementing strict access controls and monitoring for unexpected rewrite or upload behavior can further minimize potential exploitation.",
          "product_ids": [
            "AppStream-10.0.Z.E2S:tomcat9-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-1:9.0.87-5.el10_0.4.src",
            "AppStream-10.0.Z.E2S:tomcat9-admin-webapps-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-docs-webapp-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-el-3.0-api-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-jsp-2.3-api-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-lib-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-servlet-4.0-api-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-webapps-1:9.0.87-5.el10_0.4.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.0.Z.E2S:tomcat9-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-1:9.0.87-5.el10_0.4.src",
            "AppStream-10.0.Z.E2S:tomcat9-admin-webapps-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-docs-webapp-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-el-3.0-api-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-jsp-2.3-api-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-lib-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-servlet-4.0-api-1:9.0.87-5.el10_0.4.noarch",
            "AppStream-10.0.Z.E2S:tomcat9-webapps-1:9.0.87-5.el10_0.4.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for tomcat9 is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process.  Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.\n\nSecurity Fix(es):\n\n* tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)\n\n* tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:23052",
        "url": "https://access.redhat.com/errata/RHSA-2025:23052"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2362782",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
      },
      {
        "category": "external",
        "summary": "2406591",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23052.json"
      }
    ],
    "title": "Red Hat Security Advisory: tomcat9 security update",
    "tracking": {
      "current_release_date": "2026-03-18T20:51:44+00:00",
      "generator": {
        "date": "2026-03-18T20:51:44+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.3"
        }
      },
      "id": "RHSA-2025:23052",
      "initial_release_date": "2025-12-10T14:44:53+00:00",
      "revision_history": [
        {
          "date": "2025-12-10T14:44:53+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-12-10T14:44:53+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-03-18T20:51:44+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                  "product_id": "AppStream-10.1.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat9-1:9.0.87-8.el10_1.1.noarch",
                "product": {
                  "name": "tomcat9-1:9.0.87-8.el10_1.1.noarch",
                  "product_id": "tomcat9-1:9.0.87-8.el10_1.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9@9.0.87-8.el10_1.1?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat9-admin-webapps-1:9.0.87-8.el10_1.1.noarch",
                "product": {
                  "name": "tomcat9-admin-webapps-1:9.0.87-8.el10_1.1.noarch",
                  "product_id": "tomcat9-admin-webapps-1:9.0.87-8.el10_1.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9-admin-webapps@9.0.87-8.el10_1.1?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat9-docs-webapp-1:9.0.87-8.el10_1.1.noarch",
                "product": {
                  "name": "tomcat9-docs-webapp-1:9.0.87-8.el10_1.1.noarch",
                  "product_id": "tomcat9-docs-webapp-1:9.0.87-8.el10_1.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9-docs-webapp@9.0.87-8.el10_1.1?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat9-el-3.0-api-1:9.0.87-8.el10_1.1.noarch",
                "product": {
                  "name": "tomcat9-el-3.0-api-1:9.0.87-8.el10_1.1.noarch",
                  "product_id": "tomcat9-el-3.0-api-1:9.0.87-8.el10_1.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9-el-3.0-api@9.0.87-8.el10_1.1?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat9-jsp-2.3-api-1:9.0.87-8.el10_1.1.noarch",
                "product": {
                  "name": "tomcat9-jsp-2.3-api-1:9.0.87-8.el10_1.1.noarch",
                  "product_id": "tomcat9-jsp-2.3-api-1:9.0.87-8.el10_1.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9-jsp-2.3-api@9.0.87-8.el10_1.1?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat9-lib-1:9.0.87-8.el10_1.1.noarch",
                "product": {
                  "name": "tomcat9-lib-1:9.0.87-8.el10_1.1.noarch",
                  "product_id": "tomcat9-lib-1:9.0.87-8.el10_1.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9-lib@9.0.87-8.el10_1.1?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat9-servlet-4.0-api-1:9.0.87-8.el10_1.1.noarch",
                "product": {
                  "name": "tomcat9-servlet-4.0-api-1:9.0.87-8.el10_1.1.noarch",
                  "product_id": "tomcat9-servlet-4.0-api-1:9.0.87-8.el10_1.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9-servlet-4.0-api@9.0.87-8.el10_1.1?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat9-webapps-1:9.0.87-8.el10_1.1.noarch",
                "product": {
                  "name": "tomcat9-webapps-1:9.0.87-8.el10_1.1.noarch",
                  "product_id": "tomcat9-webapps-1:9.0.87-8.el10_1.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9-webapps@9.0.87-8.el10_1.1?arch=noarch\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat9-1:9.0.87-8.el10_1.1.src",
                "product": {
                  "name": "tomcat9-1:9.0.87-8.el10_1.1.src",
                  "product_id": "tomcat9-1:9.0.87-8.el10_1.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9@9.0.87-8.el10_1.1?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-1:9.0.87-8.el10_1.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:tomcat9-1:9.0.87-8.el10_1.1.noarch"
        },
        "product_reference": "tomcat9-1:9.0.87-8.el10_1.1.noarch",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-1:9.0.87-8.el10_1.1.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:tomcat9-1:9.0.87-8.el10_1.1.src"
        },
        "product_reference": "tomcat9-1:9.0.87-8.el10_1.1.src",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-admin-webapps-1:9.0.87-8.el10_1.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:tomcat9-admin-webapps-1:9.0.87-8.el10_1.1.noarch"
        },
        "product_reference": "tomcat9-admin-webapps-1:9.0.87-8.el10_1.1.noarch",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-docs-webapp-1:9.0.87-8.el10_1.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:tomcat9-docs-webapp-1:9.0.87-8.el10_1.1.noarch"
        },
        "product_reference": "tomcat9-docs-webapp-1:9.0.87-8.el10_1.1.noarch",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-el-3.0-api-1:9.0.87-8.el10_1.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:tomcat9-el-3.0-api-1:9.0.87-8.el10_1.1.noarch"
        },
        "product_reference": "tomcat9-el-3.0-api-1:9.0.87-8.el10_1.1.noarch",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-jsp-2.3-api-1:9.0.87-8.el10_1.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:tomcat9-jsp-2.3-api-1:9.0.87-8.el10_1.1.noarch"
        },
        "product_reference": "tomcat9-jsp-2.3-api-1:9.0.87-8.el10_1.1.noarch",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-lib-1:9.0.87-8.el10_1.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:tomcat9-lib-1:9.0.87-8.el10_1.1.noarch"
        },
        "product_reference": "tomcat9-lib-1:9.0.87-8.el10_1.1.noarch",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-servlet-4.0-api-1:9.0.87-8.el10_1.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:tomcat9-servlet-4.0-api-1:9.0.87-8.el10_1.1.noarch"
        },
        "product_reference": "tomcat9-servlet-4.0-api-1:9.0.87-8.el10_1.1.noarch",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-webapps-1:9.0.87-8.el10_1.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:tomcat9-webapps-1:9.0.87-8.el10_1.1.noarch"
        },
        "product_reference": "tomcat9-webapps-1:9.0.87-8.el10_1.1.noarch",
        "relates_to_product_reference": "AppStream-10.1.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-31651",
      "cwe": {
        "id": "CWE-150",
        "name": "Improper Neutralization of Escape, Meta, or Control Sequences"
      },
      "discovery_date": "2025-04-28T20:00:56.551028+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2362782"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Tomcat\u0027s rewrite rule processing component. This vulnerability allows security constraints to be bypassed via specially crafted HTTP requests when specific, uncommon rewrite rule configurations are in use.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Low severity because it only manifests under a narrow set of conditions involving uncommon and non-default rewrite rule configurations that rely on specific patterns in the raw requestURI, including path parameters. In most deployments, rewrite rules operate on decoded and normalized URIs or are used for non-security-critical purposes like routing. Furthermore, Tomcat\u2019s internal processing already normalizes and removes path parameters (;-delimited) before applying security constraints, meaning any bypass would only be feasible if the rewrite logic directly enforced security (which is a poor practice). The flaw does not allow direct code execution, data leakage, or privilege escalation unless the rewrite rule was explicitly misused as a substitute for proper access control. \n\nIts impact is further mitigated by the fact that rewrite rules are not typically relied upon for access enforcement. As such, while the bug may lead to incorrect rule evaluation under certain edge-case configurations, it does not represent a significant security risk in practice.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.1.Z:tomcat9-1:9.0.87-8.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat9-1:9.0.87-8.el10_1.1.src",
          "AppStream-10.1.Z:tomcat9-admin-webapps-1:9.0.87-8.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat9-docs-webapp-1:9.0.87-8.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat9-el-3.0-api-1:9.0.87-8.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat9-jsp-2.3-api-1:9.0.87-8.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat9-lib-1:9.0.87-8.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat9-servlet-4.0-api-1:9.0.87-8.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat9-webapps-1:9.0.87-8.el10_1.1.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "RHBZ#2362782",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-31651",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/list.html?announce@tomcat.apache.org",
          "url": "https://lists.apache.org/list.html?announce@tomcat.apache.org"
        }
      ],
      "release_date": "2025-04-28T19:17:21.721000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-10T14:44:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.1.Z:tomcat9-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-1:9.0.87-8.el10_1.1.src",
            "AppStream-10.1.Z:tomcat9-admin-webapps-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-docs-webapp-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-el-3.0-api-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-jsp-2.3-api-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-lib-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-servlet-4.0-api-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-webapps-1:9.0.87-8.el10_1.1.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:23052"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "AppStream-10.1.Z:tomcat9-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-1:9.0.87-8.el10_1.1.src",
            "AppStream-10.1.Z:tomcat9-admin-webapps-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-docs-webapp-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-el-3.0-api-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-jsp-2.3-api-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-lib-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-servlet-4.0-api-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-webapps-1:9.0.87-8.el10_1.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.1.Z:tomcat9-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-1:9.0.87-8.el10_1.1.src",
            "AppStream-10.1.Z:tomcat9-admin-webapps-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-docs-webapp-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-el-3.0-api-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-jsp-2.3-api-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-lib-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-servlet-4.0-api-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-webapps-1:9.0.87-8.el10_1.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve"
    },
    {
      "cve": "CVE-2025-55752",
      "cwe": {
        "id": "CWE-23",
        "name": "Relative Path Traversal"
      },
      "discovery_date": "2025-10-27T18:01:22.818037+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2406591"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A directory traversal vulnerability in Apache Tomcat caused by improper URL normalization during request rewriting. When specific rewrite rules are used, an attacker could craft a malicious request to bypass access restrictions and reach protected directories such as /WEB-INF/ or /META-INF/. If HTTP PUT requests are also enabled, this flaw could allow the upload of malicious files, potentially leading to remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important rather than Critical because successful exploitation depends on specific, non-default configuration conditions. The flaw only becomes exploitable when both URL rewriting rules that modify the request path are in use and HTTP PUT requests are enabled \u2014 a feature typically restricted to administrative or trusted users. In standard Tomcat deployments, PUT is disabled or tightly controlled, and rewrite configurations rarely expose sensitive paths. Therefore, while the issue could theoretically lead to remote code execution, the limited attack surface and requirement for uncommon setup conditions significantly reduce its overall risk level.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.1.Z:tomcat9-1:9.0.87-8.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat9-1:9.0.87-8.el10_1.1.src",
          "AppStream-10.1.Z:tomcat9-admin-webapps-1:9.0.87-8.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat9-docs-webapp-1:9.0.87-8.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat9-el-3.0-api-1:9.0.87-8.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat9-jsp-2.3-api-1:9.0.87-8.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat9-lib-1:9.0.87-8.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat9-servlet-4.0-api-1:9.0.87-8.el10_1.1.noarch",
          "AppStream-10.1.Z:tomcat9-webapps-1:9.0.87-8.el10_1.1.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "RHBZ#2406591",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55752",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a",
          "url": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog",
          "url": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog"
        }
      ],
      "release_date": "2025-10-27T17:29:56.060000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-10T14:44:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.1.Z:tomcat9-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-1:9.0.87-8.el10_1.1.src",
            "AppStream-10.1.Z:tomcat9-admin-webapps-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-docs-webapp-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-el-3.0-api-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-jsp-2.3-api-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-lib-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-servlet-4.0-api-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-webapps-1:9.0.87-8.el10_1.1.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:23052"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\nTo reduced the risk, by disabling or strictly limiting the use of HTTP PUT requests to trusted, authenticated users only. Additionally, administrators should review and adjust URL rewrite rules to ensure they do not manipulate request paths in ways that could expose protected directories such as /WEB-INF/ or /META-INF/. Implementing strict access controls and monitoring for unexpected rewrite or upload behavior can further minimize potential exploitation.",
          "product_ids": [
            "AppStream-10.1.Z:tomcat9-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-1:9.0.87-8.el10_1.1.src",
            "AppStream-10.1.Z:tomcat9-admin-webapps-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-docs-webapp-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-el-3.0-api-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-jsp-2.3-api-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-lib-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-servlet-4.0-api-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-webapps-1:9.0.87-8.el10_1.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.1.Z:tomcat9-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-1:9.0.87-8.el10_1.1.src",
            "AppStream-10.1.Z:tomcat9-admin-webapps-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-docs-webapp-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-el-3.0-api-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-jsp-2.3-api-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-lib-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-servlet-4.0-api-1:9.0.87-8.el10_1.1.noarch",
            "AppStream-10.1.Z:tomcat9-webapps-1:9.0.87-8.el10_1.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat JBoss Web Server 6.1.3 is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.\n\nThis release of Red Hat JBoss Web Server 6.1.3 serves as a replacement for Red Hat JBoss Web Server 6.1.2. This release includes bug fixes, enhancements and component upgrades, which are documented in the Release Notes that are linked to in the References section.\n\nSecurity Fix(es):\n\n* tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE [jws-6] (CVE-2025-55752)\n* tomcat-catalina: Apache Tomcat: Denial of service [jws-6] (CVE-2025-61795)\n* tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve [jws-6] (CVE-2025-31651)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:19809",
        "url": "https://access.redhat.com/errata/RHSA-2025:19809"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_jboss_web_server/6.1/html/red_hat_jboss_web_server_6.1_service_pack_3_release_notes/index",
        "url": "https://docs.redhat.com/en/documentation/red_hat_jboss_web_server/6.1/html/red_hat_jboss_web_server_6.1_service_pack_3_release_notes/index"
      },
      {
        "category": "external",
        "summary": "2362782",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
      },
      {
        "category": "external",
        "summary": "2406588",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406588"
      },
      {
        "category": "external",
        "summary": "2406591",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
      },
      {
        "category": "external",
        "summary": "JWS-3618",
        "url": "https://issues.redhat.com/browse/JWS-3618"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19809.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Web Server 6.1.3 release and security update",
    "tracking": {
      "current_release_date": "2026-03-18T20:51:37+00:00",
      "generator": {
        "date": "2026-03-18T20:51:37+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.3"
        }
      },
      "id": "RHSA-2025:19809",
      "initial_release_date": "2025-11-06T16:32:43+00:00",
      "revision_history": [
        {
          "date": "2025-11-06T16:32:43+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-11-26T15:57:40+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-03-18T20:51:37+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Web Server 6.1 for RHEL 10",
                "product": {
                  "name": "Red Hat JBoss Web Server 6.1 for RHEL 10",
                  "product_id": "10Base-JWS-6.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:6.1::el10"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat JBoss Web Server 6.1 for RHEL 8",
                "product": {
                  "name": "Red Hat JBoss Web Server 6.1 for RHEL 8",
                  "product_id": "8Base-JWS-6.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:6.1::el8"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat JBoss Web Server 6.1 for RHEL 9",
                "product": {
                  "name": "Red Hat JBoss Web Server 6.1 for RHEL 9",
                  "product_id": "9Base-JWS-6.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:6.1::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Web Server"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.src",
                "product": {
                  "name": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.src",
                  "product_id": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat@10.1.36-19.redhat_00018.1.el10jws?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.src",
                "product": {
                  "name": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.src",
                  "product_id": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat@10.1.36-19.redhat_00018.1.el8jws?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.src",
                "product": {
                  "name": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.src",
                  "product_id": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat@10.1.36-19.redhat_00018.1.el9jws?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                "product": {
                  "name": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                  "product_id": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat@10.1.36-19.redhat_00018.1.el10jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                "product": {
                  "name": "jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                  "product_id": "jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-admin-webapps@10.1.36-19.redhat_00018.1.el10jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                "product": {
                  "name": "jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                  "product_id": "jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-docs-webapp@10.1.36-19.redhat_00018.1.el10jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                "product": {
                  "name": "jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                  "product_id": "jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-el-5.0-api@10.1.36-19.redhat_00018.1.el10jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                "product": {
                  "name": "jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                  "product_id": "jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-javadoc@10.1.36-19.redhat_00018.1.el10jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                "product": {
                  "name": "jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                  "product_id": "jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-jsp-3.1-api@10.1.36-19.redhat_00018.1.el10jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                "product": {
                  "name": "jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                  "product_id": "jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-lib@10.1.36-19.redhat_00018.1.el10jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                "product": {
                  "name": "jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                  "product_id": "jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-selinux@10.1.36-19.redhat_00018.1.el10jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                "product": {
                  "name": "jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                  "product_id": "jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-servlet-6.0-api@10.1.36-19.redhat_00018.1.el10jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                "product": {
                  "name": "jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                  "product_id": "jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-webapps@10.1.36-19.redhat_00018.1.el10jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                "product": {
                  "name": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                  "product_id": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat@10.1.36-19.redhat_00018.1.el8jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                "product": {
                  "name": "jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                  "product_id": "jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-admin-webapps@10.1.36-19.redhat_00018.1.el8jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                "product": {
                  "name": "jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                  "product_id": "jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-docs-webapp@10.1.36-19.redhat_00018.1.el8jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                "product": {
                  "name": "jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                  "product_id": "jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-el-5.0-api@10.1.36-19.redhat_00018.1.el8jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                "product": {
                  "name": "jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                  "product_id": "jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-javadoc@10.1.36-19.redhat_00018.1.el8jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                "product": {
                  "name": "jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                  "product_id": "jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-jsp-3.1-api@10.1.36-19.redhat_00018.1.el8jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                "product": {
                  "name": "jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                  "product_id": "jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-lib@10.1.36-19.redhat_00018.1.el8jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                "product": {
                  "name": "jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                  "product_id": "jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-selinux@10.1.36-19.redhat_00018.1.el8jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                "product": {
                  "name": "jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                  "product_id": "jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-servlet-6.0-api@10.1.36-19.redhat_00018.1.el8jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                "product": {
                  "name": "jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                  "product_id": "jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-webapps@10.1.36-19.redhat_00018.1.el8jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                "product": {
                  "name": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                  "product_id": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat@10.1.36-19.redhat_00018.1.el9jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                "product": {
                  "name": "jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                  "product_id": "jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-admin-webapps@10.1.36-19.redhat_00018.1.el9jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                "product": {
                  "name": "jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                  "product_id": "jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-docs-webapp@10.1.36-19.redhat_00018.1.el9jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                "product": {
                  "name": "jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                  "product_id": "jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-el-5.0-api@10.1.36-19.redhat_00018.1.el9jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                "product": {
                  "name": "jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                  "product_id": "jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-javadoc@10.1.36-19.redhat_00018.1.el9jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                "product": {
                  "name": "jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                  "product_id": "jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-jsp-3.1-api@10.1.36-19.redhat_00018.1.el9jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                "product": {
                  "name": "jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                  "product_id": "jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-lib@10.1.36-19.redhat_00018.1.el9jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                "product": {
                  "name": "jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                  "product_id": "jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-selinux@10.1.36-19.redhat_00018.1.el9jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                "product": {
                  "name": "jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                  "product_id": "jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-servlet-6.0-api@10.1.36-19.redhat_00018.1.el9jws?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                "product": {
                  "name": "jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                  "product_id": "jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jws6-tomcat-webapps@10.1.36-19.redhat_00018.1.el9jws?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 10",
          "product_id": "10Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.noarch"
        },
        "product_reference": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
        "relates_to_product_reference": "10Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.src as a component of Red Hat JBoss Web Server 6.1 for RHEL 10",
          "product_id": "10Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.src"
        },
        "product_reference": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.src",
        "relates_to_product_reference": "10Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 10",
          "product_id": "10Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch"
        },
        "product_reference": "jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
        "relates_to_product_reference": "10Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el10jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 10",
          "product_id": "10Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el10jws.noarch"
        },
        "product_reference": "jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
        "relates_to_product_reference": "10Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 10",
          "product_id": "10Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch"
        },
        "product_reference": "jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
        "relates_to_product_reference": "10Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el10jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 10",
          "product_id": "10Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el10jws.noarch"
        },
        "product_reference": "jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
        "relates_to_product_reference": "10Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 10",
          "product_id": "10Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch"
        },
        "product_reference": "jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
        "relates_to_product_reference": "10Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el10jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 10",
          "product_id": "10Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el10jws.noarch"
        },
        "product_reference": "jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
        "relates_to_product_reference": "10Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el10jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 10",
          "product_id": "10Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el10jws.noarch"
        },
        "product_reference": "jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
        "relates_to_product_reference": "10Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 10",
          "product_id": "10Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch"
        },
        "product_reference": "jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
        "relates_to_product_reference": "10Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 10",
          "product_id": "10Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch"
        },
        "product_reference": "jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
        "relates_to_product_reference": "10Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 8",
          "product_id": "8Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.noarch"
        },
        "product_reference": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
        "relates_to_product_reference": "8Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.src as a component of Red Hat JBoss Web Server 6.1 for RHEL 8",
          "product_id": "8Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.src"
        },
        "product_reference": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.src",
        "relates_to_product_reference": "8Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 8",
          "product_id": "8Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch"
        },
        "product_reference": "jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
        "relates_to_product_reference": "8Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el8jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 8",
          "product_id": "8Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el8jws.noarch"
        },
        "product_reference": "jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
        "relates_to_product_reference": "8Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 8",
          "product_id": "8Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch"
        },
        "product_reference": "jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
        "relates_to_product_reference": "8Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el8jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 8",
          "product_id": "8Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el8jws.noarch"
        },
        "product_reference": "jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
        "relates_to_product_reference": "8Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 8",
          "product_id": "8Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch"
        },
        "product_reference": "jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
        "relates_to_product_reference": "8Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el8jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 8",
          "product_id": "8Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el8jws.noarch"
        },
        "product_reference": "jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
        "relates_to_product_reference": "8Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el8jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 8",
          "product_id": "8Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el8jws.noarch"
        },
        "product_reference": "jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
        "relates_to_product_reference": "8Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 8",
          "product_id": "8Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch"
        },
        "product_reference": "jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
        "relates_to_product_reference": "8Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 8",
          "product_id": "8Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch"
        },
        "product_reference": "jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
        "relates_to_product_reference": "8Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 9",
          "product_id": "9Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.noarch"
        },
        "product_reference": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
        "relates_to_product_reference": "9Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.src as a component of Red Hat JBoss Web Server 6.1 for RHEL 9",
          "product_id": "9Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.src"
        },
        "product_reference": "jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.src",
        "relates_to_product_reference": "9Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 9",
          "product_id": "9Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch"
        },
        "product_reference": "jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
        "relates_to_product_reference": "9Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el9jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 9",
          "product_id": "9Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el9jws.noarch"
        },
        "product_reference": "jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
        "relates_to_product_reference": "9Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 9",
          "product_id": "9Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch"
        },
        "product_reference": "jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
        "relates_to_product_reference": "9Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el9jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 9",
          "product_id": "9Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el9jws.noarch"
        },
        "product_reference": "jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
        "relates_to_product_reference": "9Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 9",
          "product_id": "9Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch"
        },
        "product_reference": "jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
        "relates_to_product_reference": "9Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el9jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 9",
          "product_id": "9Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el9jws.noarch"
        },
        "product_reference": "jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
        "relates_to_product_reference": "9Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el9jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 9",
          "product_id": "9Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el9jws.noarch"
        },
        "product_reference": "jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
        "relates_to_product_reference": "9Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 9",
          "product_id": "9Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch"
        },
        "product_reference": "jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
        "relates_to_product_reference": "9Base-JWS-6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch as a component of Red Hat JBoss Web Server 6.1 for RHEL 9",
          "product_id": "9Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch"
        },
        "product_reference": "jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
        "relates_to_product_reference": "9Base-JWS-6.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-31651",
      "cwe": {
        "id": "CWE-150",
        "name": "Improper Neutralization of Escape, Meta, or Control Sequences"
      },
      "discovery_date": "2025-04-28T20:00:56.551028+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2362782"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Tomcat\u0027s rewrite rule processing component. This vulnerability allows security constraints to be bypassed via specially crafted HTTP requests when specific, uncommon rewrite rule configurations are in use.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Low severity because it only manifests under a narrow set of conditions involving uncommon and non-default rewrite rule configurations that rely on specific patterns in the raw requestURI, including path parameters. In most deployments, rewrite rules operate on decoded and normalized URIs or are used for non-security-critical purposes like routing. Furthermore, Tomcat\u2019s internal processing already normalizes and removes path parameters (;-delimited) before applying security constraints, meaning any bypass would only be feasible if the rewrite logic directly enforced security (which is a poor practice). The flaw does not allow direct code execution, data leakage, or privilege escalation unless the rewrite rule was explicitly misused as a substitute for proper access control. \n\nIts impact is further mitigated by the fact that rewrite rules are not typically relied upon for access enforcement. As such, while the bug may lead to incorrect rule evaluation under certain edge-case configurations, it does not represent a significant security risk in practice.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.src",
          "10Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.src",
          "8Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.src",
          "9Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "RHBZ#2362782",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-31651",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/list.html?announce@tomcat.apache.org",
          "url": "https://lists.apache.org/list.html?announce@tomcat.apache.org"
        }
      ],
      "release_date": "2025-04-28T19:17:21.721000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-11-06T16:32:43+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "10Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.src",
            "10Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.src",
            "8Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.src",
            "9Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:19809"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "10Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.src",
            "10Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.src",
            "8Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.src",
            "9Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "10Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.src",
            "10Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.src",
            "8Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.src",
            "9Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve"
    },
    {
      "cve": "CVE-2025-55752",
      "cwe": {
        "id": "CWE-23",
        "name": "Relative Path Traversal"
      },
      "discovery_date": "2025-10-27T18:01:22.818037+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2406591"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A directory traversal vulnerability in Apache Tomcat caused by improper URL normalization during request rewriting. When specific rewrite rules are used, an attacker could craft a malicious request to bypass access restrictions and reach protected directories such as /WEB-INF/ or /META-INF/. If HTTP PUT requests are also enabled, this flaw could allow the upload of malicious files, potentially leading to remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important rather than Critical because successful exploitation depends on specific, non-default configuration conditions. The flaw only becomes exploitable when both URL rewriting rules that modify the request path are in use and HTTP PUT requests are enabled \u2014 a feature typically restricted to administrative or trusted users. In standard Tomcat deployments, PUT is disabled or tightly controlled, and rewrite configurations rarely expose sensitive paths. Therefore, while the issue could theoretically lead to remote code execution, the limited attack surface and requirement for uncommon setup conditions significantly reduce its overall risk level.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.src",
          "10Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.src",
          "8Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.src",
          "9Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "RHBZ#2406591",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55752",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a",
          "url": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog",
          "url": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog"
        }
      ],
      "release_date": "2025-10-27T17:29:56.060000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-11-06T16:32:43+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "10Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.src",
            "10Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.src",
            "8Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.src",
            "9Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:19809"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\nTo reduced the risk, by disabling or strictly limiting the use of HTTP PUT requests to trusted, authenticated users only. Additionally, administrators should review and adjust URL rewrite rules to ensure they do not manipulate request paths in ways that could expose protected directories such as /WEB-INF/ or /META-INF/. Implementing strict access controls and monitoring for unexpected rewrite or upload behavior can further minimize potential exploitation.",
          "product_ids": [
            "10Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.src",
            "10Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.src",
            "8Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.src",
            "9Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "10Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.src",
            "10Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.src",
            "8Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.src",
            "9Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE"
    },
    {
      "cve": "CVE-2025-61795",
      "cwe": {
        "id": "CWE-404",
        "name": "Improper Resource Shutdown or Release"
      },
      "discovery_date": "2025-10-27T18:01:06.418669+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2406588"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A denial of service flaw has been discovered in Apache Tomcat. If an error occurred (including exceeding limits) during the processing of a multipart upload, temporary copies of the uploaded parts written to disc were not cleaned up immediately but left for the garbage collection process to delete. Depending on JVM settings, application memory usage and application load, it was possible that space for the temporary copies of uploaded parts would be filled faster than GC cleared it, leading to a DoS.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.src",
          "10Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "10Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.src",
          "8Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "8Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.src",
          "9Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
          "9Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-61795"
        },
        {
          "category": "external",
          "summary": "RHBZ#2406588",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406588"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-61795",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-61795"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61795",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61795"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/1cdf5f730ede75a0759492f179ac21ca4ff68e06",
          "url": "https://github.com/apache/tomcat/commit/1cdf5f730ede75a0759492f179ac21ca4ff68e06"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/wm9mx8brmx9g4zpywm06ryrtvd3160pp",
          "url": "https://lists.apache.org/thread/wm9mx8brmx9g4zpywm06ryrtvd3160pp"
        }
      ],
      "release_date": "2025-10-27T17:30:28.334000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-11-06T16:32:43+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "10Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.src",
            "10Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.src",
            "8Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.src",
            "9Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:19809"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "10Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.src",
            "10Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.src",
            "8Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.src",
            "9Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "10Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el10jws.src",
            "10Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "10Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el10jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el8jws.src",
            "8Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "8Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el8jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-0:10.1.36-19.redhat_00018.1.el9jws.src",
            "9Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-19.redhat_00018.1.el9jws.noarch",
            "9Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-19.redhat_00018.1.el9jws.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat JBoss Web Server 5.8.6 zip release is now available for Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Windows Server.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.\n\nThis release of Red Hat JBoss Web Server 5.8.6 serves as a replacement for Red Hat JBoss Web Server 5.8.5. This release includes bug fixes, enhancements and component upgrades, which are documented in the Release Notes that are linked to in the References section.\n\nSecurity Fix(es):\n\n* [Minor Incident] tomcat: http/2 \"MadeYouReset\" DoS attack through HTTP/2 control frames [jws-5] (CVE-2025-48989)\n* tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve [jws-5] (CVE-2025-31651)\n* tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE [jws-5] (CVE-2025-55752)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:22924",
        "url": "https://access.redhat.com/errata/RHSA-2025:22924"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_jboss_web_server/5.8/html/red_hat_jboss_web_server_5.8_service_pack_6_release_notes/index",
        "url": "https://docs.redhat.com/en/documentation/red_hat_jboss_web_server/5.8/html/red_hat_jboss_web_server_5.8_service_pack_6_release_notes/index"
      },
      {
        "category": "external",
        "summary": "2362782",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
      },
      {
        "category": "external",
        "summary": "2373309",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2373309"
      },
      {
        "category": "external",
        "summary": "2406591",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22924.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Web Server 5.8.6 release and security update",
    "tracking": {
      "current_release_date": "2026-03-18T20:51:41+00:00",
      "generator": {
        "date": "2026-03-18T20:51:41+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.3"
        }
      },
      "id": "RHSA-2025:22924",
      "initial_release_date": "2025-12-09T15:22:27+00:00",
      "revision_history": [
        {
          "date": "2025-12-09T15:22:27+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-12-09T15:22:27+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-03-18T20:51:41+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Web Server 5.8.6",
                "product": {
                  "name": "Red Hat JBoss Web Server 5.8.6",
                  "product_id": "Red Hat JBoss Web Server 5.8.6",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:5.8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Web Server"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-31651",
      "cwe": {
        "id": "CWE-150",
        "name": "Improper Neutralization of Escape, Meta, or Control Sequences"
      },
      "discovery_date": "2025-04-28T20:00:56.551028+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2362782"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Tomcat\u0027s rewrite rule processing component. This vulnerability allows security constraints to be bypassed via specially crafted HTTP requests when specific, uncommon rewrite rule configurations are in use.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Low severity because it only manifests under a narrow set of conditions involving uncommon and non-default rewrite rule configurations that rely on specific patterns in the raw requestURI, including path parameters. In most deployments, rewrite rules operate on decoded and normalized URIs or are used for non-security-critical purposes like routing. Furthermore, Tomcat\u2019s internal processing already normalizes and removes path parameters (;-delimited) before applying security constraints, meaning any bypass would only be feasible if the rewrite logic directly enforced security (which is a poor practice). The flaw does not allow direct code execution, data leakage, or privilege escalation unless the rewrite rule was explicitly misused as a substitute for proper access control. \n\nIts impact is further mitigated by the fact that rewrite rules are not typically relied upon for access enforcement. As such, while the bug may lead to incorrect rule evaluation under certain edge-case configurations, it does not represent a significant security risk in practice.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Web Server 5.8.6"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "RHBZ#2362782",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-31651",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/list.html?announce@tomcat.apache.org",
          "url": "https://lists.apache.org/list.html?announce@tomcat.apache.org"
        }
      ],
      "release_date": "2025-04-28T19:17:21.721000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-09T15:22:27+00:00",
          "details": "Before applying the update, back up your existing Red Hat JBoss Web Server installation, including all applications and configuration files.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Red Hat JBoss Web Server 5.8.6"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:22924"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "Red Hat JBoss Web Server 5.8.6"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Web Server 5.8.6"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve"
    },
    {
      "cve": "CVE-2025-48989",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2025-06-18T08:15:11.266000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2373309"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Tomcat where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the \"MadeYouReset\" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: http/2 \"MadeYouReset\" DoS attack through HTTP/2 control frames",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated with an Important severity. It is simple to exploit because it does not require authentication and could result in a Denial of Service (DoS). While some DoS flaws are classified as Moderate, \u201cMadeYouReset\u201d is Important because of the limited barriers (no specialized tooling or advanced scripting) to exploitation which directly impacts service availability. The vulnerability arises from an implementation weakness in HTTP/2 stream reset handling \u2014 malformed client requests can trigger server-side resets without incrementing abuse counters, allowing an attacker to bypass built-in request throttling and overhead limits. Since these resets consume CPU and memory resources and can be generated at scale over a single TCP/TLS connection, a remote attacker could exhaust server capacity quickly, impacting all legitimate clients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Web Server 5.8.6"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-48989"
        },
        {
          "category": "external",
          "summary": "RHBZ#2373309",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2373309"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-48989",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-48989"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-48989",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48989"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/767506",
          "url": "https://kb.cert.org/vuls/id/767506"
        }
      ],
      "release_date": "2025-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-09T15:22:27+00:00",
          "details": "Before applying the update, back up your existing Red Hat JBoss Web Server installation, including all applications and configuration files.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Red Hat JBoss Web Server 5.8.6"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:22924"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "Red Hat JBoss Web Server 5.8.6"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Web Server 5.8.6"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tomcat: http/2 \"MadeYouReset\" DoS attack through HTTP/2 control frames"
    },
    {
      "cve": "CVE-2025-55752",
      "cwe": {
        "id": "CWE-23",
        "name": "Relative Path Traversal"
      },
      "discovery_date": "2025-10-27T18:01:22.818037+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2406591"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A directory traversal vulnerability in Apache Tomcat caused by improper URL normalization during request rewriting. When specific rewrite rules are used, an attacker could craft a malicious request to bypass access restrictions and reach protected directories such as /WEB-INF/ or /META-INF/. If HTTP PUT requests are also enabled, this flaw could allow the upload of malicious files, potentially leading to remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important rather than Critical because successful exploitation depends on specific, non-default configuration conditions. The flaw only becomes exploitable when both URL rewriting rules that modify the request path are in use and HTTP PUT requests are enabled \u2014 a feature typically restricted to administrative or trusted users. In standard Tomcat deployments, PUT is disabled or tightly controlled, and rewrite configurations rarely expose sensitive paths. Therefore, while the issue could theoretically lead to remote code execution, the limited attack surface and requirement for uncommon setup conditions significantly reduce its overall risk level.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Web Server 5.8.6"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "RHBZ#2406591",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55752",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a",
          "url": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog",
          "url": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog"
        }
      ],
      "release_date": "2025-10-27T17:29:56.060000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-09T15:22:27+00:00",
          "details": "Before applying the update, back up your existing Red Hat JBoss Web Server installation, including all applications and configuration files.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Red Hat JBoss Web Server 5.8.6"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:22924"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\nTo reduced the risk, by disabling or strictly limiting the use of HTTP PUT requests to trusted, authenticated users only. Additionally, administrators should review and adjust URL rewrite rules to ensure they do not manipulate request paths in ways that could expose protected directories such as /WEB-INF/ or /META-INF/. Implementing strict access controls and monitoring for unexpected rewrite or upload behavior can further minimize potential exploitation.",
          "product_ids": [
            "Red Hat JBoss Web Server 5.8.6"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Web Server 5.8.6"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for tomcat is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.\n\nSecurity Fix(es):\n\n* tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)\n\n* tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:23045",
        "url": "https://access.redhat.com/errata/RHSA-2025:23045"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2362782",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
      },
      {
        "category": "external",
        "summary": "2406591",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23045.json"
      }
    ],
    "title": "Red Hat Security Advisory: tomcat security update",
    "tracking": {
      "current_release_date": "2026-03-18T20:51:41+00:00",
      "generator": {
        "date": "2026-03-18T20:51:41+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.3"
        }
      },
      "id": "RHSA-2025:23045",
      "initial_release_date": "2025-12-10T14:52:08+00:00",
      "revision_history": [
        {
          "date": "2025-12-10T14:52:08+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-12-10T14:52:08+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-03-18T20:51:41+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream E4S (v.8.8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream E4S (v.8.8)",
                  "product_id": "AppStream-8.8.0.Z.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_e4s:8.8::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream TUS (v.8.8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream TUS (v.8.8)",
                  "product_id": "AppStream-8.8.0.Z.TUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_tus:8.8::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat-1:9.0.87-1.el8_8.8.src",
                "product": {
                  "name": "tomcat-1:9.0.87-1.el8_8.8.src",
                  "product_id": "tomcat-1:9.0.87-1.el8_8.8.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat@9.0.87-1.el8_8.8?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat-1:9.0.87-1.el8_8.8.noarch",
                "product": {
                  "name": "tomcat-1:9.0.87-1.el8_8.8.noarch",
                  "product_id": "tomcat-1:9.0.87-1.el8_8.8.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat@9.0.87-1.el8_8.8?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-admin-webapps-1:9.0.87-1.el8_8.8.noarch",
                "product": {
                  "name": "tomcat-admin-webapps-1:9.0.87-1.el8_8.8.noarch",
                  "product_id": "tomcat-admin-webapps-1:9.0.87-1.el8_8.8.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-admin-webapps@9.0.87-1.el8_8.8?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-docs-webapp-1:9.0.87-1.el8_8.8.noarch",
                "product": {
                  "name": "tomcat-docs-webapp-1:9.0.87-1.el8_8.8.noarch",
                  "product_id": "tomcat-docs-webapp-1:9.0.87-1.el8_8.8.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-docs-webapp@9.0.87-1.el8_8.8?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-el-3.0-api-1:9.0.87-1.el8_8.8.noarch",
                "product": {
                  "name": "tomcat-el-3.0-api-1:9.0.87-1.el8_8.8.noarch",
                  "product_id": "tomcat-el-3.0-api-1:9.0.87-1.el8_8.8.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-el-3.0-api@9.0.87-1.el8_8.8?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.8.noarch",
                "product": {
                  "name": "tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.8.noarch",
                  "product_id": "tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.8.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-jsp-2.3-api@9.0.87-1.el8_8.8?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-lib-1:9.0.87-1.el8_8.8.noarch",
                "product": {
                  "name": "tomcat-lib-1:9.0.87-1.el8_8.8.noarch",
                  "product_id": "tomcat-lib-1:9.0.87-1.el8_8.8.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-lib@9.0.87-1.el8_8.8?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.8.noarch",
                "product": {
                  "name": "tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.8.noarch",
                  "product_id": "tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.8.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-servlet-4.0-api@9.0.87-1.el8_8.8?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-webapps-1:9.0.87-1.el8_8.8.noarch",
                "product": {
                  "name": "tomcat-webapps-1:9.0.87-1.el8_8.8.noarch",
                  "product_id": "tomcat-webapps-1:9.0.87-1.el8_8.8.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-webapps@9.0.87-1.el8_8.8?arch=noarch\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-1:9.0.87-1.el8_8.8.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.E4S:tomcat-1:9.0.87-1.el8_8.8.noarch"
        },
        "product_reference": "tomcat-1:9.0.87-1.el8_8.8.noarch",
        "relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-1:9.0.87-1.el8_8.8.src as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.E4S:tomcat-1:9.0.87-1.el8_8.8.src"
        },
        "product_reference": "tomcat-1:9.0.87-1.el8_8.8.src",
        "relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-admin-webapps-1:9.0.87-1.el8_8.8.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.E4S:tomcat-admin-webapps-1:9.0.87-1.el8_8.8.noarch"
        },
        "product_reference": "tomcat-admin-webapps-1:9.0.87-1.el8_8.8.noarch",
        "relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-docs-webapp-1:9.0.87-1.el8_8.8.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.E4S:tomcat-docs-webapp-1:9.0.87-1.el8_8.8.noarch"
        },
        "product_reference": "tomcat-docs-webapp-1:9.0.87-1.el8_8.8.noarch",
        "relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-el-3.0-api-1:9.0.87-1.el8_8.8.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.E4S:tomcat-el-3.0-api-1:9.0.87-1.el8_8.8.noarch"
        },
        "product_reference": "tomcat-el-3.0-api-1:9.0.87-1.el8_8.8.noarch",
        "relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.8.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.E4S:tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.8.noarch"
        },
        "product_reference": "tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.8.noarch",
        "relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-lib-1:9.0.87-1.el8_8.8.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.E4S:tomcat-lib-1:9.0.87-1.el8_8.8.noarch"
        },
        "product_reference": "tomcat-lib-1:9.0.87-1.el8_8.8.noarch",
        "relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.8.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.E4S:tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.8.noarch"
        },
        "product_reference": "tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.8.noarch",
        "relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-webapps-1:9.0.87-1.el8_8.8.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.E4S:tomcat-webapps-1:9.0.87-1.el8_8.8.noarch"
        },
        "product_reference": "tomcat-webapps-1:9.0.87-1.el8_8.8.noarch",
        "relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-1:9.0.87-1.el8_8.8.noarch as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.TUS:tomcat-1:9.0.87-1.el8_8.8.noarch"
        },
        "product_reference": "tomcat-1:9.0.87-1.el8_8.8.noarch",
        "relates_to_product_reference": "AppStream-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-1:9.0.87-1.el8_8.8.src as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.TUS:tomcat-1:9.0.87-1.el8_8.8.src"
        },
        "product_reference": "tomcat-1:9.0.87-1.el8_8.8.src",
        "relates_to_product_reference": "AppStream-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-admin-webapps-1:9.0.87-1.el8_8.8.noarch as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.TUS:tomcat-admin-webapps-1:9.0.87-1.el8_8.8.noarch"
        },
        "product_reference": "tomcat-admin-webapps-1:9.0.87-1.el8_8.8.noarch",
        "relates_to_product_reference": "AppStream-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-docs-webapp-1:9.0.87-1.el8_8.8.noarch as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.TUS:tomcat-docs-webapp-1:9.0.87-1.el8_8.8.noarch"
        },
        "product_reference": "tomcat-docs-webapp-1:9.0.87-1.el8_8.8.noarch",
        "relates_to_product_reference": "AppStream-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-el-3.0-api-1:9.0.87-1.el8_8.8.noarch as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.TUS:tomcat-el-3.0-api-1:9.0.87-1.el8_8.8.noarch"
        },
        "product_reference": "tomcat-el-3.0-api-1:9.0.87-1.el8_8.8.noarch",
        "relates_to_product_reference": "AppStream-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.8.noarch as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.TUS:tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.8.noarch"
        },
        "product_reference": "tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.8.noarch",
        "relates_to_product_reference": "AppStream-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-lib-1:9.0.87-1.el8_8.8.noarch as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.TUS:tomcat-lib-1:9.0.87-1.el8_8.8.noarch"
        },
        "product_reference": "tomcat-lib-1:9.0.87-1.el8_8.8.noarch",
        "relates_to_product_reference": "AppStream-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.8.noarch as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.TUS:tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.8.noarch"
        },
        "product_reference": "tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.8.noarch",
        "relates_to_product_reference": "AppStream-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-webapps-1:9.0.87-1.el8_8.8.noarch as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.TUS:tomcat-webapps-1:9.0.87-1.el8_8.8.noarch"
        },
        "product_reference": "tomcat-webapps-1:9.0.87-1.el8_8.8.noarch",
        "relates_to_product_reference": "AppStream-8.8.0.Z.TUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-31651",
      "cwe": {
        "id": "CWE-150",
        "name": "Improper Neutralization of Escape, Meta, or Control Sequences"
      },
      "discovery_date": "2025-04-28T20:00:56.551028+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2362782"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Tomcat\u0027s rewrite rule processing component. This vulnerability allows security constraints to be bypassed via specially crafted HTTP requests when specific, uncommon rewrite rule configurations are in use.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Low severity because it only manifests under a narrow set of conditions involving uncommon and non-default rewrite rule configurations that rely on specific patterns in the raw requestURI, including path parameters. In most deployments, rewrite rules operate on decoded and normalized URIs or are used for non-security-critical purposes like routing. Furthermore, Tomcat\u2019s internal processing already normalizes and removes path parameters (;-delimited) before applying security constraints, meaning any bypass would only be feasible if the rewrite logic directly enforced security (which is a poor practice). The flaw does not allow direct code execution, data leakage, or privilege escalation unless the rewrite rule was explicitly misused as a substitute for proper access control. \n\nIts impact is further mitigated by the fact that rewrite rules are not typically relied upon for access enforcement. As such, while the bug may lead to incorrect rule evaluation under certain edge-case configurations, it does not represent a significant security risk in practice.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.Z.E4S:tomcat-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.E4S:tomcat-1:9.0.87-1.el8_8.8.src",
          "AppStream-8.8.0.Z.E4S:tomcat-admin-webapps-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.E4S:tomcat-docs-webapp-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.E4S:tomcat-el-3.0-api-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.E4S:tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.E4S:tomcat-lib-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.E4S:tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.E4S:tomcat-webapps-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.TUS:tomcat-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.TUS:tomcat-1:9.0.87-1.el8_8.8.src",
          "AppStream-8.8.0.Z.TUS:tomcat-admin-webapps-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.TUS:tomcat-docs-webapp-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.TUS:tomcat-el-3.0-api-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.TUS:tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.TUS:tomcat-lib-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.TUS:tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.TUS:tomcat-webapps-1:9.0.87-1.el8_8.8.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "RHBZ#2362782",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-31651",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/list.html?announce@tomcat.apache.org",
          "url": "https://lists.apache.org/list.html?announce@tomcat.apache.org"
        }
      ],
      "release_date": "2025-04-28T19:17:21.721000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-10T14:52:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.Z.E4S:tomcat-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-1:9.0.87-1.el8_8.8.src",
            "AppStream-8.8.0.Z.E4S:tomcat-admin-webapps-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-docs-webapp-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-el-3.0-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-lib-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-webapps-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-1:9.0.87-1.el8_8.8.src",
            "AppStream-8.8.0.Z.TUS:tomcat-admin-webapps-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-docs-webapp-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-el-3.0-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-lib-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-webapps-1:9.0.87-1.el8_8.8.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:23045"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "AppStream-8.8.0.Z.E4S:tomcat-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-1:9.0.87-1.el8_8.8.src",
            "AppStream-8.8.0.Z.E4S:tomcat-admin-webapps-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-docs-webapp-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-el-3.0-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-lib-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-webapps-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-1:9.0.87-1.el8_8.8.src",
            "AppStream-8.8.0.Z.TUS:tomcat-admin-webapps-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-docs-webapp-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-el-3.0-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-lib-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-webapps-1:9.0.87-1.el8_8.8.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.Z.E4S:tomcat-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-1:9.0.87-1.el8_8.8.src",
            "AppStream-8.8.0.Z.E4S:tomcat-admin-webapps-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-docs-webapp-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-el-3.0-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-lib-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-webapps-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-1:9.0.87-1.el8_8.8.src",
            "AppStream-8.8.0.Z.TUS:tomcat-admin-webapps-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-docs-webapp-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-el-3.0-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-lib-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-webapps-1:9.0.87-1.el8_8.8.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve"
    },
    {
      "cve": "CVE-2025-55752",
      "cwe": {
        "id": "CWE-23",
        "name": "Relative Path Traversal"
      },
      "discovery_date": "2025-10-27T18:01:22.818037+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2406591"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A directory traversal vulnerability in Apache Tomcat caused by improper URL normalization during request rewriting. When specific rewrite rules are used, an attacker could craft a malicious request to bypass access restrictions and reach protected directories such as /WEB-INF/ or /META-INF/. If HTTP PUT requests are also enabled, this flaw could allow the upload of malicious files, potentially leading to remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important rather than Critical because successful exploitation depends on specific, non-default configuration conditions. The flaw only becomes exploitable when both URL rewriting rules that modify the request path are in use and HTTP PUT requests are enabled \u2014 a feature typically restricted to administrative or trusted users. In standard Tomcat deployments, PUT is disabled or tightly controlled, and rewrite configurations rarely expose sensitive paths. Therefore, while the issue could theoretically lead to remote code execution, the limited attack surface and requirement for uncommon setup conditions significantly reduce its overall risk level.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.Z.E4S:tomcat-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.E4S:tomcat-1:9.0.87-1.el8_8.8.src",
          "AppStream-8.8.0.Z.E4S:tomcat-admin-webapps-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.E4S:tomcat-docs-webapp-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.E4S:tomcat-el-3.0-api-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.E4S:tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.E4S:tomcat-lib-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.E4S:tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.E4S:tomcat-webapps-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.TUS:tomcat-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.TUS:tomcat-1:9.0.87-1.el8_8.8.src",
          "AppStream-8.8.0.Z.TUS:tomcat-admin-webapps-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.TUS:tomcat-docs-webapp-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.TUS:tomcat-el-3.0-api-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.TUS:tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.TUS:tomcat-lib-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.TUS:tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.8.noarch",
          "AppStream-8.8.0.Z.TUS:tomcat-webapps-1:9.0.87-1.el8_8.8.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "RHBZ#2406591",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55752",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a",
          "url": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog",
          "url": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog"
        }
      ],
      "release_date": "2025-10-27T17:29:56.060000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-10T14:52:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.Z.E4S:tomcat-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-1:9.0.87-1.el8_8.8.src",
            "AppStream-8.8.0.Z.E4S:tomcat-admin-webapps-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-docs-webapp-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-el-3.0-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-lib-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-webapps-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-1:9.0.87-1.el8_8.8.src",
            "AppStream-8.8.0.Z.TUS:tomcat-admin-webapps-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-docs-webapp-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-el-3.0-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-lib-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-webapps-1:9.0.87-1.el8_8.8.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:23045"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\nTo reduced the risk, by disabling or strictly limiting the use of HTTP PUT requests to trusted, authenticated users only. Additionally, administrators should review and adjust URL rewrite rules to ensure they do not manipulate request paths in ways that could expose protected directories such as /WEB-INF/ or /META-INF/. Implementing strict access controls and monitoring for unexpected rewrite or upload behavior can further minimize potential exploitation.",
          "product_ids": [
            "AppStream-8.8.0.Z.E4S:tomcat-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-1:9.0.87-1.el8_8.8.src",
            "AppStream-8.8.0.Z.E4S:tomcat-admin-webapps-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-docs-webapp-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-el-3.0-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-lib-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-webapps-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-1:9.0.87-1.el8_8.8.src",
            "AppStream-8.8.0.Z.TUS:tomcat-admin-webapps-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-docs-webapp-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-el-3.0-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-lib-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-webapps-1:9.0.87-1.el8_8.8.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.Z.E4S:tomcat-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-1:9.0.87-1.el8_8.8.src",
            "AppStream-8.8.0.Z.E4S:tomcat-admin-webapps-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-docs-webapp-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-el-3.0-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-lib-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.E4S:tomcat-webapps-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-1:9.0.87-1.el8_8.8.src",
            "AppStream-8.8.0.Z.TUS:tomcat-admin-webapps-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-docs-webapp-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-el-3.0-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-lib-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.8.noarch",
            "AppStream-8.8.0.Z.TUS:tomcat-webapps-1:9.0.87-1.el8_8.8.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for tomcat is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.\n\nSecurity Fix(es):\n\n* tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)\n\n* tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:23049",
        "url": "https://access.redhat.com/errata/RHSA-2025:23049"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2362782",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
      },
      {
        "category": "external",
        "summary": "2406591",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23049.json"
      }
    ],
    "title": "Red Hat Security Advisory: tomcat security update",
    "tracking": {
      "current_release_date": "2026-03-18T20:51:47+00:00",
      "generator": {
        "date": "2026-03-18T20:51:47+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.3"
        }
      },
      "id": "RHSA-2025:23049",
      "initial_release_date": "2025-12-10T15:15:23+00:00",
      "revision_history": [
        {
          "date": "2025-12-10T15:15:23+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-12-10T15:15:23+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-03-18T20:51:47+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.7.0.Z.MAIN",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat-1:9.0.87-6.el9_7.1.src",
                "product": {
                  "name": "tomcat-1:9.0.87-6.el9_7.1.src",
                  "product_id": "tomcat-1:9.0.87-6.el9_7.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat@9.0.87-6.el9_7.1?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat-1:9.0.87-6.el9_7.1.noarch",
                "product": {
                  "name": "tomcat-1:9.0.87-6.el9_7.1.noarch",
                  "product_id": "tomcat-1:9.0.87-6.el9_7.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat@9.0.87-6.el9_7.1?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-admin-webapps-1:9.0.87-6.el9_7.1.noarch",
                "product": {
                  "name": "tomcat-admin-webapps-1:9.0.87-6.el9_7.1.noarch",
                  "product_id": "tomcat-admin-webapps-1:9.0.87-6.el9_7.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-admin-webapps@9.0.87-6.el9_7.1?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-docs-webapp-1:9.0.87-6.el9_7.1.noarch",
                "product": {
                  "name": "tomcat-docs-webapp-1:9.0.87-6.el9_7.1.noarch",
                  "product_id": "tomcat-docs-webapp-1:9.0.87-6.el9_7.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-docs-webapp@9.0.87-6.el9_7.1?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-el-3.0-api-1:9.0.87-6.el9_7.1.noarch",
                "product": {
                  "name": "tomcat-el-3.0-api-1:9.0.87-6.el9_7.1.noarch",
                  "product_id": "tomcat-el-3.0-api-1:9.0.87-6.el9_7.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-el-3.0-api@9.0.87-6.el9_7.1?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-jsp-2.3-api-1:9.0.87-6.el9_7.1.noarch",
                "product": {
                  "name": "tomcat-jsp-2.3-api-1:9.0.87-6.el9_7.1.noarch",
                  "product_id": "tomcat-jsp-2.3-api-1:9.0.87-6.el9_7.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-jsp-2.3-api@9.0.87-6.el9_7.1?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-lib-1:9.0.87-6.el9_7.1.noarch",
                "product": {
                  "name": "tomcat-lib-1:9.0.87-6.el9_7.1.noarch",
                  "product_id": "tomcat-lib-1:9.0.87-6.el9_7.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-lib@9.0.87-6.el9_7.1?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-servlet-4.0-api-1:9.0.87-6.el9_7.1.noarch",
                "product": {
                  "name": "tomcat-servlet-4.0-api-1:9.0.87-6.el9_7.1.noarch",
                  "product_id": "tomcat-servlet-4.0-api-1:9.0.87-6.el9_7.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-servlet-4.0-api@9.0.87-6.el9_7.1?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-webapps-1:9.0.87-6.el9_7.1.noarch",
                "product": {
                  "name": "tomcat-webapps-1:9.0.87-6.el9_7.1.noarch",
                  "product_id": "tomcat-webapps-1:9.0.87-6.el9_7.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-webapps@9.0.87-6.el9_7.1?arch=noarch\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-1:9.0.87-6.el9_7.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tomcat-1:9.0.87-6.el9_7.1.noarch"
        },
        "product_reference": "tomcat-1:9.0.87-6.el9_7.1.noarch",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-1:9.0.87-6.el9_7.1.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tomcat-1:9.0.87-6.el9_7.1.src"
        },
        "product_reference": "tomcat-1:9.0.87-6.el9_7.1.src",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-admin-webapps-1:9.0.87-6.el9_7.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tomcat-admin-webapps-1:9.0.87-6.el9_7.1.noarch"
        },
        "product_reference": "tomcat-admin-webapps-1:9.0.87-6.el9_7.1.noarch",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-docs-webapp-1:9.0.87-6.el9_7.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tomcat-docs-webapp-1:9.0.87-6.el9_7.1.noarch"
        },
        "product_reference": "tomcat-docs-webapp-1:9.0.87-6.el9_7.1.noarch",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-el-3.0-api-1:9.0.87-6.el9_7.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tomcat-el-3.0-api-1:9.0.87-6.el9_7.1.noarch"
        },
        "product_reference": "tomcat-el-3.0-api-1:9.0.87-6.el9_7.1.noarch",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-jsp-2.3-api-1:9.0.87-6.el9_7.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tomcat-jsp-2.3-api-1:9.0.87-6.el9_7.1.noarch"
        },
        "product_reference": "tomcat-jsp-2.3-api-1:9.0.87-6.el9_7.1.noarch",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-lib-1:9.0.87-6.el9_7.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tomcat-lib-1:9.0.87-6.el9_7.1.noarch"
        },
        "product_reference": "tomcat-lib-1:9.0.87-6.el9_7.1.noarch",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-servlet-4.0-api-1:9.0.87-6.el9_7.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tomcat-servlet-4.0-api-1:9.0.87-6.el9_7.1.noarch"
        },
        "product_reference": "tomcat-servlet-4.0-api-1:9.0.87-6.el9_7.1.noarch",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-webapps-1:9.0.87-6.el9_7.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tomcat-webapps-1:9.0.87-6.el9_7.1.noarch"
        },
        "product_reference": "tomcat-webapps-1:9.0.87-6.el9_7.1.noarch",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-31651",
      "cwe": {
        "id": "CWE-150",
        "name": "Improper Neutralization of Escape, Meta, or Control Sequences"
      },
      "discovery_date": "2025-04-28T20:00:56.551028+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2362782"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Tomcat\u0027s rewrite rule processing component. This vulnerability allows security constraints to be bypassed via specially crafted HTTP requests when specific, uncommon rewrite rule configurations are in use.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Low severity because it only manifests under a narrow set of conditions involving uncommon and non-default rewrite rule configurations that rely on specific patterns in the raw requestURI, including path parameters. In most deployments, rewrite rules operate on decoded and normalized URIs or are used for non-security-critical purposes like routing. Furthermore, Tomcat\u2019s internal processing already normalizes and removes path parameters (;-delimited) before applying security constraints, meaning any bypass would only be feasible if the rewrite logic directly enforced security (which is a poor practice). The flaw does not allow direct code execution, data leakage, or privilege escalation unless the rewrite rule was explicitly misused as a substitute for proper access control. \n\nIts impact is further mitigated by the fact that rewrite rules are not typically relied upon for access enforcement. As such, while the bug may lead to incorrect rule evaluation under certain edge-case configurations, it does not represent a significant security risk in practice.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.7.0.Z.MAIN:tomcat-1:9.0.87-6.el9_7.1.noarch",
          "AppStream-9.7.0.Z.MAIN:tomcat-1:9.0.87-6.el9_7.1.src",
          "AppStream-9.7.0.Z.MAIN:tomcat-admin-webapps-1:9.0.87-6.el9_7.1.noarch",
          "AppStream-9.7.0.Z.MAIN:tomcat-docs-webapp-1:9.0.87-6.el9_7.1.noarch",
          "AppStream-9.7.0.Z.MAIN:tomcat-el-3.0-api-1:9.0.87-6.el9_7.1.noarch",
          "AppStream-9.7.0.Z.MAIN:tomcat-jsp-2.3-api-1:9.0.87-6.el9_7.1.noarch",
          "AppStream-9.7.0.Z.MAIN:tomcat-lib-1:9.0.87-6.el9_7.1.noarch",
          "AppStream-9.7.0.Z.MAIN:tomcat-servlet-4.0-api-1:9.0.87-6.el9_7.1.noarch",
          "AppStream-9.7.0.Z.MAIN:tomcat-webapps-1:9.0.87-6.el9_7.1.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "RHBZ#2362782",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-31651",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/list.html?announce@tomcat.apache.org",
          "url": "https://lists.apache.org/list.html?announce@tomcat.apache.org"
        }
      ],
      "release_date": "2025-04-28T19:17:21.721000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-10T15:15:23+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.7.0.Z.MAIN:tomcat-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-1:9.0.87-6.el9_7.1.src",
            "AppStream-9.7.0.Z.MAIN:tomcat-admin-webapps-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-docs-webapp-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-el-3.0-api-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-jsp-2.3-api-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-lib-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-servlet-4.0-api-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-webapps-1:9.0.87-6.el9_7.1.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:23049"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "AppStream-9.7.0.Z.MAIN:tomcat-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-1:9.0.87-6.el9_7.1.src",
            "AppStream-9.7.0.Z.MAIN:tomcat-admin-webapps-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-docs-webapp-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-el-3.0-api-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-jsp-2.3-api-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-lib-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-servlet-4.0-api-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-webapps-1:9.0.87-6.el9_7.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.7.0.Z.MAIN:tomcat-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-1:9.0.87-6.el9_7.1.src",
            "AppStream-9.7.0.Z.MAIN:tomcat-admin-webapps-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-docs-webapp-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-el-3.0-api-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-jsp-2.3-api-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-lib-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-servlet-4.0-api-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-webapps-1:9.0.87-6.el9_7.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve"
    },
    {
      "cve": "CVE-2025-55752",
      "cwe": {
        "id": "CWE-23",
        "name": "Relative Path Traversal"
      },
      "discovery_date": "2025-10-27T18:01:22.818037+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2406591"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A directory traversal vulnerability in Apache Tomcat caused by improper URL normalization during request rewriting. When specific rewrite rules are used, an attacker could craft a malicious request to bypass access restrictions and reach protected directories such as /WEB-INF/ or /META-INF/. If HTTP PUT requests are also enabled, this flaw could allow the upload of malicious files, potentially leading to remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important rather than Critical because successful exploitation depends on specific, non-default configuration conditions. The flaw only becomes exploitable when both URL rewriting rules that modify the request path are in use and HTTP PUT requests are enabled \u2014 a feature typically restricted to administrative or trusted users. In standard Tomcat deployments, PUT is disabled or tightly controlled, and rewrite configurations rarely expose sensitive paths. Therefore, while the issue could theoretically lead to remote code execution, the limited attack surface and requirement for uncommon setup conditions significantly reduce its overall risk level.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.7.0.Z.MAIN:tomcat-1:9.0.87-6.el9_7.1.noarch",
          "AppStream-9.7.0.Z.MAIN:tomcat-1:9.0.87-6.el9_7.1.src",
          "AppStream-9.7.0.Z.MAIN:tomcat-admin-webapps-1:9.0.87-6.el9_7.1.noarch",
          "AppStream-9.7.0.Z.MAIN:tomcat-docs-webapp-1:9.0.87-6.el9_7.1.noarch",
          "AppStream-9.7.0.Z.MAIN:tomcat-el-3.0-api-1:9.0.87-6.el9_7.1.noarch",
          "AppStream-9.7.0.Z.MAIN:tomcat-jsp-2.3-api-1:9.0.87-6.el9_7.1.noarch",
          "AppStream-9.7.0.Z.MAIN:tomcat-lib-1:9.0.87-6.el9_7.1.noarch",
          "AppStream-9.7.0.Z.MAIN:tomcat-servlet-4.0-api-1:9.0.87-6.el9_7.1.noarch",
          "AppStream-9.7.0.Z.MAIN:tomcat-webapps-1:9.0.87-6.el9_7.1.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "RHBZ#2406591",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55752",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a",
          "url": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog",
          "url": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog"
        }
      ],
      "release_date": "2025-10-27T17:29:56.060000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-10T15:15:23+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.7.0.Z.MAIN:tomcat-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-1:9.0.87-6.el9_7.1.src",
            "AppStream-9.7.0.Z.MAIN:tomcat-admin-webapps-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-docs-webapp-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-el-3.0-api-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-jsp-2.3-api-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-lib-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-servlet-4.0-api-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-webapps-1:9.0.87-6.el9_7.1.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:23049"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\nTo reduced the risk, by disabling or strictly limiting the use of HTTP PUT requests to trusted, authenticated users only. Additionally, administrators should review and adjust URL rewrite rules to ensure they do not manipulate request paths in ways that could expose protected directories such as /WEB-INF/ or /META-INF/. Implementing strict access controls and monitoring for unexpected rewrite or upload behavior can further minimize potential exploitation.",
          "product_ids": [
            "AppStream-9.7.0.Z.MAIN:tomcat-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-1:9.0.87-6.el9_7.1.src",
            "AppStream-9.7.0.Z.MAIN:tomcat-admin-webapps-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-docs-webapp-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-el-3.0-api-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-jsp-2.3-api-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-lib-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-servlet-4.0-api-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-webapps-1:9.0.87-6.el9_7.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.7.0.Z.MAIN:tomcat-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-1:9.0.87-6.el9_7.1.src",
            "AppStream-9.7.0.Z.MAIN:tomcat-admin-webapps-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-docs-webapp-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-el-3.0-api-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-jsp-2.3-api-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-lib-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-servlet-4.0-api-1:9.0.87-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tomcat-webapps-1:9.0.87-6.el9_7.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for the pki-deps:10.6 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.\n\nSecurity Fix(es):\n\n* tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)\n\n* tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:2726",
        "url": "https://access.redhat.com/errata/RHSA-2026:2726"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2362782",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
      },
      {
        "category": "external",
        "summary": "2406591",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2726.json"
      }
    ],
    "title": "Red Hat Security Advisory: pki-deps:10.6 security update",
    "tracking": {
      "current_release_date": "2026-03-18T20:51:46+00:00",
      "generator": {
        "date": "2026-03-18T20:51:46+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.3"
        }
      },
      "id": "RHSA-2026:2726",
      "initial_release_date": "2026-02-16T12:04:57+00:00",
      "revision_history": [
        {
          "date": "2026-02-16T12:04:57+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-02-16T12:04:57+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-03-18T20:51:46+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream AUS (v.8.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream AUS (v.8.6)",
                  "product_id": "AppStream-8.6.0.Z.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_aus:8.6::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream E4S (v.8.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream E4S (v.8.6)",
                  "product_id": "AppStream-8.6.0.Z.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_e4s:8.6::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream TUS (v.8.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream TUS (v.8.6)",
                  "product_id": "AppStream-8.6.0.Z.TUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_tus:8.6::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apache-commons-collections@3.2.2-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apache-commons-lang@2.6-21.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
                "product": {
                  "name": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch (pki-deps:10.6)",
                  "product_id": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apache-commons-net@3.6-3.module%2Bel8.3.0%2B6805%2B72837426?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bea-stax-api@1.2.0-16.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
                "product": {
                  "name": "fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6)",
                  "product_id": "fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/fasterxml-oss-parent@69-2.module%2Bel8.6.0%2B23397%2B419fb810?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/glassfish-fastinfoset@1.2.13-9.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/glassfish-jaxb-api@2.2.12-8.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/glassfish-jaxb-core@2.2.11-11.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/glassfish-jaxb-runtime@2.2.11-11.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/glassfish-jaxb-txw2@2.2.11-11.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6)",
                  "product_id": "jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-annotations@2.19.1-2.module%2Bel8.6.0%2B23397%2B419fb810?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6)",
                  "product_id": "jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-bom@2.19.1-2.module%2Bel8.6.0%2B23397%2B419fb810?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6)",
                  "product_id": "jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-core@2.19.1-2.module%2Bel8.6.0%2B23397%2B419fb810?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6)",
                  "product_id": "jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-databind@2.19.1-1.module%2Bel8.6.0%2B23397%2B419fb810?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6)",
                  "product_id": "jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-jaxrs-json-provider@2.19.1-1.module%2Bel8.6.0%2B23397%2B419fb810?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6)",
                  "product_id": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-jaxrs-providers@2.19.1-1.module%2Bel8.6.0%2B23397%2B419fb810?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6)",
                  "product_id": "jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-module-jaxb-annotations@2.19.1-1.module%2Bel8.6.0%2B23397%2B419fb810?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6)",
                  "product_id": "jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-modules-base@2.19.1-1.module%2Bel8.6.0%2B23397%2B419fb810?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
                "product": {
                  "name": "jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6)",
                  "product_id": "jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-parent@2.19.2-2.module%2Bel8.6.0%2B23397%2B419fb810?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-28.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026epoch=1\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/javassist@3.18.1-8.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/javassist-javadoc@3.18.1-8.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
                "product": {
                  "name": "pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch (pki-deps:10.6)",
                  "product_id": "pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pki-servlet-4.0-api@9.0.30-3.module%2Bel8.6.0%2B23938%2Bb3b8726f.3?arch=noarch\u0026epoch=1\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
                "product": {
                  "name": "pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch (pki-deps:10.6)",
                  "product_id": "pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pki-servlet-engine@9.0.30-3.module%2Bel8.6.0%2B23938%2Bb3b8726f.3?arch=noarch\u0026epoch=1\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/relaxngDatatype@2011.1-7.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
                "product": {
                  "name": "resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch (pki-deps:10.6)",
                  "product_id": "resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/resteasy@3.0.26-6.module%2Bel8.6.0%2B23400%2Baafc0b27?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/slf4j@1.7.25-4.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/slf4j-jdk14@1.7.25-4.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
                "product": {
                  "name": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch (pki-deps:10.6)",
                  "product_id": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/stax-ex@1.7.7-8.module%2Bel8.2.0%2B5723%2B4574fbff?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/velocity@1.7-24.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xalan-j2@2.7.1-38.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xerces-j2@2.11.0-34.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xml-commons-apis@1.4.01-25.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xml-commons-resolver@1.2-26.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
                "product": {
                  "name": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch (pki-deps:10.6)",
                  "product_id": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xmlstreambuffer@1.5.4-8.module%2Bel8.2.0%2B5723%2B4574fbff?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                "product": {
                  "name": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6)",
                  "product_id": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xsom@0-19.20110809svn.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=noarch\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apache-commons-collections@3.2.2-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apache-commons-lang@2.6-21.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
                "product": {
                  "name": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src (pki-deps:10.6)",
                  "product_id": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apache-commons-net@3.6-3.module%2Bel8.3.0%2B6805%2B72837426?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bea-stax@1.2.0-16.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
                "product": {
                  "name": "fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src (pki-deps:10.6)",
                  "product_id": "fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/fasterxml-oss-parent@69-2.module%2Bel8.6.0%2B23397%2B419fb810?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/glassfish-fastinfoset@1.2.13-9.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/glassfish-jaxb@2.2.11-11.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/glassfish-jaxb-api@2.2.12-8.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
                "product": {
                  "name": "jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src (pki-deps:10.6)",
                  "product_id": "jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-annotations@2.19.1-2.module%2Bel8.6.0%2B23397%2B419fb810?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
                "product": {
                  "name": "jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src (pki-deps:10.6)",
                  "product_id": "jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-bom@2.19.1-2.module%2Bel8.6.0%2B23397%2B419fb810?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
                "product": {
                  "name": "jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src (pki-deps:10.6)",
                  "product_id": "jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-core@2.19.1-2.module%2Bel8.6.0%2B23397%2B419fb810?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
                "product": {
                  "name": "jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src (pki-deps:10.6)",
                  "product_id": "jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-databind@2.19.1-1.module%2Bel8.6.0%2B23397%2B419fb810?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
                "product": {
                  "name": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src (pki-deps:10.6)",
                  "product_id": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-jaxrs-providers@2.19.1-1.module%2Bel8.6.0%2B23397%2B419fb810?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
                "product": {
                  "name": "jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src (pki-deps:10.6)",
                  "product_id": "jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-modules-base@2.19.1-1.module%2Bel8.6.0%2B23397%2B419fb810?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
                "product": {
                  "name": "jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src (pki-deps:10.6)",
                  "product_id": "jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jackson-parent@2.19.2-2.module%2Bel8.6.0%2B23397%2B419fb810?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-28.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026epoch=1\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/javassist@3.18.1-8.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
                "product": {
                  "name": "pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src (pki-deps:10.6)",
                  "product_id": "pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pki-servlet-engine@9.0.30-3.module%2Bel8.6.0%2B23938%2Bb3b8726f.3?arch=src\u0026epoch=1\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-nss@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/relaxngDatatype@2011.1-7.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
                "product": {
                  "name": "resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src (pki-deps:10.6)",
                  "product_id": "resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/resteasy@3.0.26-6.module%2Bel8.6.0%2B23400%2Baafc0b27?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/slf4j@1.7.25-4.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
                "product": {
                  "name": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src (pki-deps:10.6)",
                  "product_id": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/stax-ex@1.7.7-8.module%2Bel8.2.0%2B5723%2B4574fbff?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/velocity@1.7-24.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xalan-j2@2.7.1-38.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xerces-j2@2.11.0-34.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xml-commons-apis@1.4.01-25.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xml-commons-resolver@1.2-26.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
                "product": {
                  "name": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src (pki-deps:10.6)",
                  "product_id": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xmlstreambuffer@1.5.4-8.module%2Bel8.2.0%2B5723%2B4574fbff?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                "product": {
                  "name": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6)",
                  "product_id": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xsom@0-19.20110809svn.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=src\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
                "product": {
                  "name": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6)",
                  "product_id": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-nss-debugsource@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=x86_64\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
                "product": {
                  "name": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6)",
                  "product_id": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-nss-doc@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=x86_64\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
                "product": {
                  "name": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6)",
                  "product_id": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-nss@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=x86_64\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
                "product": {
                  "name": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6)",
                  "product_id": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-nss-debuginfo@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=x86_64\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
                "product": {
                  "name": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64 (pki-deps:10.6)",
                  "product_id": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-nss-debugsource@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=aarch64\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
                "product": {
                  "name": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64 (pki-deps:10.6)",
                  "product_id": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-nss-doc@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=aarch64\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
                "product": {
                  "name": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64 (pki-deps:10.6)",
                  "product_id": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-nss@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=aarch64\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
                "product": {
                  "name": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64 (pki-deps:10.6)",
                  "product_id": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-nss-debuginfo@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=aarch64\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
                "product": {
                  "name": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le (pki-deps:10.6)",
                  "product_id": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-nss-debugsource@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=ppc64le\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
                "product": {
                  "name": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le (pki-deps:10.6)",
                  "product_id": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-nss-doc@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=ppc64le\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
                "product": {
                  "name": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le (pki-deps:10.6)",
                  "product_id": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-nss@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=ppc64le\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
                "product": {
                  "name": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le (pki-deps:10.6)",
                  "product_id": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-nss-debuginfo@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=ppc64le\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
                "product": {
                  "name": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x (pki-deps:10.6)",
                  "product_id": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-nss-debugsource@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=s390x\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
                "product": {
                  "name": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x (pki-deps:10.6)",
                  "product_id": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-nss-doc@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=s390x\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
                "product": {
                  "name": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x (pki-deps:10.6)",
                  "product_id": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-nss@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=s390x\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
                "product": {
                  "name": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x (pki-deps:10.6)",
                  "product_id": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-nss-debuginfo@1.0.1-10.module%2Bel8.1.0%2B3366%2B6dfb954c?arch=s390x\u0026rpmmod=pki-deps:10.6:8060020260128101437:ad008a3a"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6"
        },
        "product_reference": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6"
        },
        "product_reference": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6"
        },
        "product_reference": "fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6"
        },
        "product_reference": "jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6"
        },
        "product_reference": "jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6"
        },
        "product_reference": "jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6"
        },
        "product_reference": "jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6"
        },
        "product_reference": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6"
        },
        "product_reference": "jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6"
        },
        "product_reference": "jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6"
        },
        "product_reference": "pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6"
        },
        "product_reference": "pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6"
        },
        "product_reference": "pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6"
        },
        "product_reference": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6"
        },
        "product_reference": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6"
        },
        "product_reference": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6"
        },
        "product_reference": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6"
        },
        "product_reference": "resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6"
        },
        "product_reference": "resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6"
        },
        "product_reference": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6"
        },
        "product_reference": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6"
        },
        "product_reference": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6"
        },
        "product_reference": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6"
        },
        "product_reference": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6"
        },
        "product_reference": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6"
        },
        "product_reference": "fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6"
        },
        "product_reference": "jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6"
        },
        "product_reference": "jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6"
        },
        "product_reference": "jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6"
        },
        "product_reference": "jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6"
        },
        "product_reference": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6"
        },
        "product_reference": "jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6"
        },
        "product_reference": "jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6"
        },
        "product_reference": "pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6"
        },
        "product_reference": "pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6"
        },
        "product_reference": "pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6"
        },
        "product_reference": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6"
        },
        "product_reference": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6"
        },
        "product_reference": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6"
        },
        "product_reference": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6"
        },
        "product_reference": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6"
        },
        "product_reference": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6"
        },
        "product_reference": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6"
        },
        "product_reference": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6"
        },
        "product_reference": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6"
        },
        "product_reference": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6"
        },
        "product_reference": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6"
        },
        "product_reference": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6"
        },
        "product_reference": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6"
        },
        "product_reference": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6"
        },
        "product_reference": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6"
        },
        "product_reference": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6"
        },
        "product_reference": "resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6"
        },
        "product_reference": "resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6"
        },
        "product_reference": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6"
        },
        "product_reference": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6"
        },
        "product_reference": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6"
        },
        "product_reference": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.E4S:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6"
        },
        "product_reference": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6"
        },
        "product_reference": "apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6"
        },
        "product_reference": "fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6"
        },
        "product_reference": "jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6"
        },
        "product_reference": "jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6"
        },
        "product_reference": "jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6"
        },
        "product_reference": "jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6"
        },
        "product_reference": "jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6"
        },
        "product_reference": "jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6"
        },
        "product_reference": "jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6"
        },
        "product_reference": "jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6"
        },
        "product_reference": "pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6"
        },
        "product_reference": "pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6"
        },
        "product_reference": "pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6"
        },
        "product_reference": "python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6"
        },
        "product_reference": "python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6"
        },
        "product_reference": "python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64 (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6"
        },
        "product_reference": "python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6"
        },
        "product_reference": "resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6"
        },
        "product_reference": "resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6"
        },
        "product_reference": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6"
        },
        "product_reference": "stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6"
        },
        "product_reference": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6"
        },
        "product_reference": "xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6"
        },
        "product_reference": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.TUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        },
        "product_reference": "xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
        "relates_to_product_reference": "AppStream-8.6.0.Z.TUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-31651",
      "cwe": {
        "id": "CWE-150",
        "name": "Improper Neutralization of Escape, Meta, or Control Sequences"
      },
      "discovery_date": "2025-04-28T20:00:56.551028+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2362782"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Tomcat\u0027s rewrite rule processing component. This vulnerability allows security constraints to be bypassed via specially crafted HTTP requests when specific, uncommon rewrite rule configurations are in use.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Low severity because it only manifests under a narrow set of conditions involving uncommon and non-default rewrite rule configurations that rely on specific patterns in the raw requestURI, including path parameters. In most deployments, rewrite rules operate on decoded and normalized URIs or are used for non-security-critical purposes like routing. Furthermore, Tomcat\u2019s internal processing already normalizes and removes path parameters (;-delimited) before applying security constraints, meaning any bypass would only be feasible if the rewrite logic directly enforced security (which is a poor practice). The flaw does not allow direct code execution, data leakage, or privilege escalation unless the rewrite rule was explicitly misused as a substitute for proper access control. \n\nIts impact is further mitigated by the fact that rewrite rules are not typically relied upon for access enforcement. As such, while the bug may lead to incorrect rule evaluation under certain edge-case configurations, it does not represent a significant security risk in practice.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "RHBZ#2362782",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-31651",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/list.html?announce@tomcat.apache.org",
          "url": "https://lists.apache.org/list.html?announce@tomcat.apache.org"
        }
      ],
      "release_date": "2025-04-28T19:17:21.721000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-02-16T12:04:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:2726"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve"
    },
    {
      "cve": "CVE-2025-55752",
      "cwe": {
        "id": "CWE-23",
        "name": "Relative Path Traversal"
      },
      "discovery_date": "2025-10-27T18:01:22.818037+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2406591"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A directory traversal vulnerability in Apache Tomcat caused by improper URL normalization during request rewriting. When specific rewrite rules are used, an attacker could craft a malicious request to bypass access restrictions and reach protected directories such as /WEB-INF/ or /META-INF/. If HTTP PUT requests are also enabled, this flaw could allow the upload of malicious files, potentially leading to remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important rather than Critical because successful exploitation depends on specific, non-default configuration conditions. The flaw only becomes exploitable when both URL rewriting rules that modify the request path are in use and HTTP PUT requests are enabled \u2014 a feature typically restricted to administrative or trusted users. In standard Tomcat deployments, PUT is disabled or tightly controlled, and rewrite configurations rarely expose sensitive paths. Therefore, while the issue could theoretically lead to remote code execution, the limited attack surface and requirement for uncommon setup conditions significantly reduce its overall risk level.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.E4S:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
          "AppStream-8.6.0.Z.TUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "RHBZ#2406591",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55752",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a",
          "url": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog",
          "url": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog"
        }
      ],
      "release_date": "2025-10-27T17:29:56.060000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-02-16T12:04:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:2726"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\nTo reduced the risk, by disabling or strictly limiting the use of HTTP PUT requests to trusted, authenticated users only. Additionally, administrators should review and adjust URL rewrite rules to ensure they do not manipulate request paths in ways that could expose protected directories such as /WEB-INF/ or /META-INF/. Implementing strict access controls and monitoring for unexpected rewrite or upload behavior can further minimize potential exploitation.",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.AUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.E4S:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-collections-0:3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-lang-0:2.6-21.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:apache-commons-net-0:3.6-3.module+el8.3.0+6805+72837426.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:bea-stax-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:bea-stax-api-0:1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:fasterxml-oss-parent-0:69-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-core-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-annotations-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-bom-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-core-0:2.19.1-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-databind-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-jaxrs-json-provider-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-jaxrs-providers-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-module-jaxb-annotations-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-modules-base-0:2.19.1-1.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jackson-parent-0:2.19.2-2.module+el8.6.0+23397+419fb810.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:jakarta-commons-httpclient-1:3.1-28.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:javassist-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:javassist-javadoc-0:3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:pki-servlet-4.0-api-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:pki-servlet-engine-1:9.0.30-3.module+el8.6.0+23938+b3b8726f.3.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python-nss-debugsource-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python-nss-doc-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python3-nss-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:python3-nss-debuginfo-0:1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:relaxngDatatype-0:2011.1-7.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:resteasy-0:3.0.26-6.module+el8.6.0+23400+aafc0b27.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:slf4j-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:slf4j-jdk14-0:1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:stax-ex-0:1.7.7-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:velocity-0:1.7-24.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xalan-j2-0:2.7.1-38.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xerces-j2-0:2.11.0-34.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xml-commons-apis-0:1.4.01-25.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xml-commons-resolver-0:1.2-26.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xmlstreambuffer-0:1.5.4-8.module+el8.2.0+5723+4574fbff.src::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6",
            "AppStream-8.6.0.Z.TUS:xsom-0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for tomcat is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.\n\nSecurity Fix(es):\n\n* tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)\n\n* tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:23044",
        "url": "https://access.redhat.com/errata/RHSA-2025:23044"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2362782",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
      },
      {
        "category": "external",
        "summary": "2406591",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23044.json"
      }
    ],
    "title": "Red Hat Security Advisory: tomcat security update",
    "tracking": {
      "current_release_date": "2026-03-18T20:51:42+00:00",
      "generator": {
        "date": "2026-03-18T20:51:42+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.3"
        }
      },
      "id": "RHSA-2025:23044",
      "initial_release_date": "2025-12-10T17:07:38+00:00",
      "revision_history": [
        {
          "date": "2025-12-10T17:07:38+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-12-10T17:07:38+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-03-18T20:51:42+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
                  "product_id": "AppStream-9.6.0.Z.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_eus:9.6::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat-1:9.0.87-3.el9_6.4.src",
                "product": {
                  "name": "tomcat-1:9.0.87-3.el9_6.4.src",
                  "product_id": "tomcat-1:9.0.87-3.el9_6.4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat@9.0.87-3.el9_6.4?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat-1:9.0.87-3.el9_6.4.noarch",
                "product": {
                  "name": "tomcat-1:9.0.87-3.el9_6.4.noarch",
                  "product_id": "tomcat-1:9.0.87-3.el9_6.4.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat@9.0.87-3.el9_6.4?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-admin-webapps-1:9.0.87-3.el9_6.4.noarch",
                "product": {
                  "name": "tomcat-admin-webapps-1:9.0.87-3.el9_6.4.noarch",
                  "product_id": "tomcat-admin-webapps-1:9.0.87-3.el9_6.4.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-admin-webapps@9.0.87-3.el9_6.4?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-docs-webapp-1:9.0.87-3.el9_6.4.noarch",
                "product": {
                  "name": "tomcat-docs-webapp-1:9.0.87-3.el9_6.4.noarch",
                  "product_id": "tomcat-docs-webapp-1:9.0.87-3.el9_6.4.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-docs-webapp@9.0.87-3.el9_6.4?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-el-3.0-api-1:9.0.87-3.el9_6.4.noarch",
                "product": {
                  "name": "tomcat-el-3.0-api-1:9.0.87-3.el9_6.4.noarch",
                  "product_id": "tomcat-el-3.0-api-1:9.0.87-3.el9_6.4.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-el-3.0-api@9.0.87-3.el9_6.4?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-jsp-2.3-api-1:9.0.87-3.el9_6.4.noarch",
                "product": {
                  "name": "tomcat-jsp-2.3-api-1:9.0.87-3.el9_6.4.noarch",
                  "product_id": "tomcat-jsp-2.3-api-1:9.0.87-3.el9_6.4.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-jsp-2.3-api@9.0.87-3.el9_6.4?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-lib-1:9.0.87-3.el9_6.4.noarch",
                "product": {
                  "name": "tomcat-lib-1:9.0.87-3.el9_6.4.noarch",
                  "product_id": "tomcat-lib-1:9.0.87-3.el9_6.4.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-lib@9.0.87-3.el9_6.4?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-servlet-4.0-api-1:9.0.87-3.el9_6.4.noarch",
                "product": {
                  "name": "tomcat-servlet-4.0-api-1:9.0.87-3.el9_6.4.noarch",
                  "product_id": "tomcat-servlet-4.0-api-1:9.0.87-3.el9_6.4.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-servlet-4.0-api@9.0.87-3.el9_6.4?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-webapps-1:9.0.87-3.el9_6.4.noarch",
                "product": {
                  "name": "tomcat-webapps-1:9.0.87-3.el9_6.4.noarch",
                  "product_id": "tomcat-webapps-1:9.0.87-3.el9_6.4.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat-webapps@9.0.87-3.el9_6.4?arch=noarch\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-1:9.0.87-3.el9_6.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:tomcat-1:9.0.87-3.el9_6.4.noarch"
        },
        "product_reference": "tomcat-1:9.0.87-3.el9_6.4.noarch",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-1:9.0.87-3.el9_6.4.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:tomcat-1:9.0.87-3.el9_6.4.src"
        },
        "product_reference": "tomcat-1:9.0.87-3.el9_6.4.src",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-admin-webapps-1:9.0.87-3.el9_6.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:tomcat-admin-webapps-1:9.0.87-3.el9_6.4.noarch"
        },
        "product_reference": "tomcat-admin-webapps-1:9.0.87-3.el9_6.4.noarch",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-docs-webapp-1:9.0.87-3.el9_6.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:tomcat-docs-webapp-1:9.0.87-3.el9_6.4.noarch"
        },
        "product_reference": "tomcat-docs-webapp-1:9.0.87-3.el9_6.4.noarch",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-el-3.0-api-1:9.0.87-3.el9_6.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:tomcat-el-3.0-api-1:9.0.87-3.el9_6.4.noarch"
        },
        "product_reference": "tomcat-el-3.0-api-1:9.0.87-3.el9_6.4.noarch",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-jsp-2.3-api-1:9.0.87-3.el9_6.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:tomcat-jsp-2.3-api-1:9.0.87-3.el9_6.4.noarch"
        },
        "product_reference": "tomcat-jsp-2.3-api-1:9.0.87-3.el9_6.4.noarch",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-lib-1:9.0.87-3.el9_6.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:tomcat-lib-1:9.0.87-3.el9_6.4.noarch"
        },
        "product_reference": "tomcat-lib-1:9.0.87-3.el9_6.4.noarch",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-servlet-4.0-api-1:9.0.87-3.el9_6.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:tomcat-servlet-4.0-api-1:9.0.87-3.el9_6.4.noarch"
        },
        "product_reference": "tomcat-servlet-4.0-api-1:9.0.87-3.el9_6.4.noarch",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-webapps-1:9.0.87-3.el9_6.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:tomcat-webapps-1:9.0.87-3.el9_6.4.noarch"
        },
        "product_reference": "tomcat-webapps-1:9.0.87-3.el9_6.4.noarch",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-31651",
      "cwe": {
        "id": "CWE-150",
        "name": "Improper Neutralization of Escape, Meta, or Control Sequences"
      },
      "discovery_date": "2025-04-28T20:00:56.551028+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2362782"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Tomcat\u0027s rewrite rule processing component. This vulnerability allows security constraints to be bypassed via specially crafted HTTP requests when specific, uncommon rewrite rule configurations are in use.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Low severity because it only manifests under a narrow set of conditions involving uncommon and non-default rewrite rule configurations that rely on specific patterns in the raw requestURI, including path parameters. In most deployments, rewrite rules operate on decoded and normalized URIs or are used for non-security-critical purposes like routing. Furthermore, Tomcat\u2019s internal processing already normalizes and removes path parameters (;-delimited) before applying security constraints, meaning any bypass would only be feasible if the rewrite logic directly enforced security (which is a poor practice). The flaw does not allow direct code execution, data leakage, or privilege escalation unless the rewrite rule was explicitly misused as a substitute for proper access control. \n\nIts impact is further mitigated by the fact that rewrite rules are not typically relied upon for access enforcement. As such, while the bug may lead to incorrect rule evaluation under certain edge-case configurations, it does not represent a significant security risk in practice.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:tomcat-1:9.0.87-3.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:tomcat-1:9.0.87-3.el9_6.4.src",
          "AppStream-9.6.0.Z.EUS:tomcat-admin-webapps-1:9.0.87-3.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:tomcat-docs-webapp-1:9.0.87-3.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:tomcat-el-3.0-api-1:9.0.87-3.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:tomcat-jsp-2.3-api-1:9.0.87-3.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:tomcat-lib-1:9.0.87-3.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:tomcat-servlet-4.0-api-1:9.0.87-3.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:tomcat-webapps-1:9.0.87-3.el9_6.4.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "RHBZ#2362782",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362782"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-31651",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/list.html?announce@tomcat.apache.org",
          "url": "https://lists.apache.org/list.html?announce@tomcat.apache.org"
        }
      ],
      "release_date": "2025-04-28T19:17:21.721000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-10T17:07:38+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:tomcat-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-1:9.0.87-3.el9_6.4.src",
            "AppStream-9.6.0.Z.EUS:tomcat-admin-webapps-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-docs-webapp-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-el-3.0-api-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-jsp-2.3-api-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-lib-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-servlet-4.0-api-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-webapps-1:9.0.87-3.el9_6.4.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:23044"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:tomcat-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-1:9.0.87-3.el9_6.4.src",
            "AppStream-9.6.0.Z.EUS:tomcat-admin-webapps-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-docs-webapp-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-el-3.0-api-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-jsp-2.3-api-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-lib-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-servlet-4.0-api-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-webapps-1:9.0.87-3.el9_6.4.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:tomcat-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-1:9.0.87-3.el9_6.4.src",
            "AppStream-9.6.0.Z.EUS:tomcat-admin-webapps-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-docs-webapp-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-el-3.0-api-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-jsp-2.3-api-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-lib-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-servlet-4.0-api-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-webapps-1:9.0.87-3.el9_6.4.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve"
    },
    {
      "cve": "CVE-2025-55752",
      "cwe": {
        "id": "CWE-23",
        "name": "Relative Path Traversal"
      },
      "discovery_date": "2025-10-27T18:01:22.818037+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2406591"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A directory traversal vulnerability in Apache Tomcat caused by improper URL normalization during request rewriting. When specific rewrite rules are used, an attacker could craft a malicious request to bypass access restrictions and reach protected directories such as /WEB-INF/ or /META-INF/. If HTTP PUT requests are also enabled, this flaw could allow the upload of malicious files, potentially leading to remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important rather than Critical because successful exploitation depends on specific, non-default configuration conditions. The flaw only becomes exploitable when both URL rewriting rules that modify the request path are in use and HTTP PUT requests are enabled \u2014 a feature typically restricted to administrative or trusted users. In standard Tomcat deployments, PUT is disabled or tightly controlled, and rewrite configurations rarely expose sensitive paths. Therefore, while the issue could theoretically lead to remote code execution, the limited attack surface and requirement for uncommon setup conditions significantly reduce its overall risk level.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:tomcat-1:9.0.87-3.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:tomcat-1:9.0.87-3.el9_6.4.src",
          "AppStream-9.6.0.Z.EUS:tomcat-admin-webapps-1:9.0.87-3.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:tomcat-docs-webapp-1:9.0.87-3.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:tomcat-el-3.0-api-1:9.0.87-3.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:tomcat-jsp-2.3-api-1:9.0.87-3.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:tomcat-lib-1:9.0.87-3.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:tomcat-servlet-4.0-api-1:9.0.87-3.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:tomcat-webapps-1:9.0.87-3.el9_6.4.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "RHBZ#2406591",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406591"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55752",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55752"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a",
          "url": "https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog",
          "url": "https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog"
        }
      ],
      "release_date": "2025-10-27T17:29:56.060000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-12-10T17:07:38+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:tomcat-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-1:9.0.87-3.el9_6.4.src",
            "AppStream-9.6.0.Z.EUS:tomcat-admin-webapps-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-docs-webapp-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-el-3.0-api-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-jsp-2.3-api-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-lib-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-servlet-4.0-api-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-webapps-1:9.0.87-3.el9_6.4.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:23044"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\nTo reduced the risk, by disabling or strictly limiting the use of HTTP PUT requests to trusted, authenticated users only. Additionally, administrators should review and adjust URL rewrite rules to ensure they do not manipulate request paths in ways that could expose protected directories such as /WEB-INF/ or /META-INF/. Implementing strict access controls and monitoring for unexpected rewrite or upload behavior can further minimize potential exploitation.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:tomcat-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-1:9.0.87-3.el9_6.4.src",
            "AppStream-9.6.0.Z.EUS:tomcat-admin-webapps-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-docs-webapp-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-el-3.0-api-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-jsp-2.3-api-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-lib-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-servlet-4.0-api-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-webapps-1:9.0.87-3.el9_6.4.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:tomcat-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-1:9.0.87-3.el9_6.4.src",
            "AppStream-9.6.0.Z.EUS:tomcat-admin-webapps-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-docs-webapp-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-el-3.0-api-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-jsp-2.3-api-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-lib-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-servlet-4.0-api-1:9.0.87-3.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:tomcat-webapps-1:9.0.87-3.el9_6.4.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "tomcat10-10.1.40-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the tomcat10-10.1.40-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2025-15049",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15049-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-31650 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-31650/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-31651 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-31651/"
      }
    ],
    "title": "tomcat10-10.1.40-1.1 on GA media",
    "tracking": {
      "current_release_date": "2025-05-02T00:00:00Z",
      "generator": {
        "date": "2025-05-02T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2025:15049-1",
      "initial_release_date": "2025-05-02T00:00:00Z",
      "revision_history": [
        {
          "date": "2025-05-02T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat10-10.1.40-1.1.aarch64",
                "product": {
                  "name": "tomcat10-10.1.40-1.1.aarch64",
                  "product_id": "tomcat10-10.1.40-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-admin-webapps-10.1.40-1.1.aarch64",
                "product": {
                  "name": "tomcat10-admin-webapps-10.1.40-1.1.aarch64",
                  "product_id": "tomcat10-admin-webapps-10.1.40-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-doc-10.1.40-1.1.aarch64",
                "product": {
                  "name": "tomcat10-doc-10.1.40-1.1.aarch64",
                  "product_id": "tomcat10-doc-10.1.40-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-docs-webapp-10.1.40-1.1.aarch64",
                "product": {
                  "name": "tomcat10-docs-webapp-10.1.40-1.1.aarch64",
                  "product_id": "tomcat10-docs-webapp-10.1.40-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-el-5_0-api-10.1.40-1.1.aarch64",
                "product": {
                  "name": "tomcat10-el-5_0-api-10.1.40-1.1.aarch64",
                  "product_id": "tomcat10-el-5_0-api-10.1.40-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-embed-10.1.40-1.1.aarch64",
                "product": {
                  "name": "tomcat10-embed-10.1.40-1.1.aarch64",
                  "product_id": "tomcat10-embed-10.1.40-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-jsp-3_1-api-10.1.40-1.1.aarch64",
                "product": {
                  "name": "tomcat10-jsp-3_1-api-10.1.40-1.1.aarch64",
                  "product_id": "tomcat10-jsp-3_1-api-10.1.40-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-jsvc-10.1.40-1.1.aarch64",
                "product": {
                  "name": "tomcat10-jsvc-10.1.40-1.1.aarch64",
                  "product_id": "tomcat10-jsvc-10.1.40-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-lib-10.1.40-1.1.aarch64",
                "product": {
                  "name": "tomcat10-lib-10.1.40-1.1.aarch64",
                  "product_id": "tomcat10-lib-10.1.40-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-servlet-6_0-api-10.1.40-1.1.aarch64",
                "product": {
                  "name": "tomcat10-servlet-6_0-api-10.1.40-1.1.aarch64",
                  "product_id": "tomcat10-servlet-6_0-api-10.1.40-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-webapps-10.1.40-1.1.aarch64",
                "product": {
                  "name": "tomcat10-webapps-10.1.40-1.1.aarch64",
                  "product_id": "tomcat10-webapps-10.1.40-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat10-10.1.40-1.1.ppc64le",
                "product": {
                  "name": "tomcat10-10.1.40-1.1.ppc64le",
                  "product_id": "tomcat10-10.1.40-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-admin-webapps-10.1.40-1.1.ppc64le",
                "product": {
                  "name": "tomcat10-admin-webapps-10.1.40-1.1.ppc64le",
                  "product_id": "tomcat10-admin-webapps-10.1.40-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-doc-10.1.40-1.1.ppc64le",
                "product": {
                  "name": "tomcat10-doc-10.1.40-1.1.ppc64le",
                  "product_id": "tomcat10-doc-10.1.40-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-docs-webapp-10.1.40-1.1.ppc64le",
                "product": {
                  "name": "tomcat10-docs-webapp-10.1.40-1.1.ppc64le",
                  "product_id": "tomcat10-docs-webapp-10.1.40-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-el-5_0-api-10.1.40-1.1.ppc64le",
                "product": {
                  "name": "tomcat10-el-5_0-api-10.1.40-1.1.ppc64le",
                  "product_id": "tomcat10-el-5_0-api-10.1.40-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-embed-10.1.40-1.1.ppc64le",
                "product": {
                  "name": "tomcat10-embed-10.1.40-1.1.ppc64le",
                  "product_id": "tomcat10-embed-10.1.40-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-jsp-3_1-api-10.1.40-1.1.ppc64le",
                "product": {
                  "name": "tomcat10-jsp-3_1-api-10.1.40-1.1.ppc64le",
                  "product_id": "tomcat10-jsp-3_1-api-10.1.40-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-jsvc-10.1.40-1.1.ppc64le",
                "product": {
                  "name": "tomcat10-jsvc-10.1.40-1.1.ppc64le",
                  "product_id": "tomcat10-jsvc-10.1.40-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-lib-10.1.40-1.1.ppc64le",
                "product": {
                  "name": "tomcat10-lib-10.1.40-1.1.ppc64le",
                  "product_id": "tomcat10-lib-10.1.40-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-servlet-6_0-api-10.1.40-1.1.ppc64le",
                "product": {
                  "name": "tomcat10-servlet-6_0-api-10.1.40-1.1.ppc64le",
                  "product_id": "tomcat10-servlet-6_0-api-10.1.40-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-webapps-10.1.40-1.1.ppc64le",
                "product": {
                  "name": "tomcat10-webapps-10.1.40-1.1.ppc64le",
                  "product_id": "tomcat10-webapps-10.1.40-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat10-10.1.40-1.1.s390x",
                "product": {
                  "name": "tomcat10-10.1.40-1.1.s390x",
                  "product_id": "tomcat10-10.1.40-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-admin-webapps-10.1.40-1.1.s390x",
                "product": {
                  "name": "tomcat10-admin-webapps-10.1.40-1.1.s390x",
                  "product_id": "tomcat10-admin-webapps-10.1.40-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-doc-10.1.40-1.1.s390x",
                "product": {
                  "name": "tomcat10-doc-10.1.40-1.1.s390x",
                  "product_id": "tomcat10-doc-10.1.40-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-docs-webapp-10.1.40-1.1.s390x",
                "product": {
                  "name": "tomcat10-docs-webapp-10.1.40-1.1.s390x",
                  "product_id": "tomcat10-docs-webapp-10.1.40-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-el-5_0-api-10.1.40-1.1.s390x",
                "product": {
                  "name": "tomcat10-el-5_0-api-10.1.40-1.1.s390x",
                  "product_id": "tomcat10-el-5_0-api-10.1.40-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-embed-10.1.40-1.1.s390x",
                "product": {
                  "name": "tomcat10-embed-10.1.40-1.1.s390x",
                  "product_id": "tomcat10-embed-10.1.40-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-jsp-3_1-api-10.1.40-1.1.s390x",
                "product": {
                  "name": "tomcat10-jsp-3_1-api-10.1.40-1.1.s390x",
                  "product_id": "tomcat10-jsp-3_1-api-10.1.40-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-jsvc-10.1.40-1.1.s390x",
                "product": {
                  "name": "tomcat10-jsvc-10.1.40-1.1.s390x",
                  "product_id": "tomcat10-jsvc-10.1.40-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-lib-10.1.40-1.1.s390x",
                "product": {
                  "name": "tomcat10-lib-10.1.40-1.1.s390x",
                  "product_id": "tomcat10-lib-10.1.40-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-servlet-6_0-api-10.1.40-1.1.s390x",
                "product": {
                  "name": "tomcat10-servlet-6_0-api-10.1.40-1.1.s390x",
                  "product_id": "tomcat10-servlet-6_0-api-10.1.40-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-webapps-10.1.40-1.1.s390x",
                "product": {
                  "name": "tomcat10-webapps-10.1.40-1.1.s390x",
                  "product_id": "tomcat10-webapps-10.1.40-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat10-10.1.40-1.1.x86_64",
                "product": {
                  "name": "tomcat10-10.1.40-1.1.x86_64",
                  "product_id": "tomcat10-10.1.40-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-admin-webapps-10.1.40-1.1.x86_64",
                "product": {
                  "name": "tomcat10-admin-webapps-10.1.40-1.1.x86_64",
                  "product_id": "tomcat10-admin-webapps-10.1.40-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-doc-10.1.40-1.1.x86_64",
                "product": {
                  "name": "tomcat10-doc-10.1.40-1.1.x86_64",
                  "product_id": "tomcat10-doc-10.1.40-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-docs-webapp-10.1.40-1.1.x86_64",
                "product": {
                  "name": "tomcat10-docs-webapp-10.1.40-1.1.x86_64",
                  "product_id": "tomcat10-docs-webapp-10.1.40-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-el-5_0-api-10.1.40-1.1.x86_64",
                "product": {
                  "name": "tomcat10-el-5_0-api-10.1.40-1.1.x86_64",
                  "product_id": "tomcat10-el-5_0-api-10.1.40-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-embed-10.1.40-1.1.x86_64",
                "product": {
                  "name": "tomcat10-embed-10.1.40-1.1.x86_64",
                  "product_id": "tomcat10-embed-10.1.40-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-jsp-3_1-api-10.1.40-1.1.x86_64",
                "product": {
                  "name": "tomcat10-jsp-3_1-api-10.1.40-1.1.x86_64",
                  "product_id": "tomcat10-jsp-3_1-api-10.1.40-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-jsvc-10.1.40-1.1.x86_64",
                "product": {
                  "name": "tomcat10-jsvc-10.1.40-1.1.x86_64",
                  "product_id": "tomcat10-jsvc-10.1.40-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-lib-10.1.40-1.1.x86_64",
                "product": {
                  "name": "tomcat10-lib-10.1.40-1.1.x86_64",
                  "product_id": "tomcat10-lib-10.1.40-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-servlet-6_0-api-10.1.40-1.1.x86_64",
                "product": {
                  "name": "tomcat10-servlet-6_0-api-10.1.40-1.1.x86_64",
                  "product_id": "tomcat10-servlet-6_0-api-10.1.40-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat10-webapps-10.1.40-1.1.x86_64",
                "product": {
                  "name": "tomcat10-webapps-10.1.40-1.1.x86_64",
                  "product_id": "tomcat10-webapps-10.1.40-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-10.1.40-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.aarch64"
        },
        "product_reference": "tomcat10-10.1.40-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-10.1.40-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.ppc64le"
        },
        "product_reference": "tomcat10-10.1.40-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-10.1.40-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.s390x"
        },
        "product_reference": "tomcat10-10.1.40-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-10.1.40-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.x86_64"
        },
        "product_reference": "tomcat10-10.1.40-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-admin-webapps-10.1.40-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.aarch64"
        },
        "product_reference": "tomcat10-admin-webapps-10.1.40-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-admin-webapps-10.1.40-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.ppc64le"
        },
        "product_reference": "tomcat10-admin-webapps-10.1.40-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-admin-webapps-10.1.40-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.s390x"
        },
        "product_reference": "tomcat10-admin-webapps-10.1.40-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-admin-webapps-10.1.40-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.x86_64"
        },
        "product_reference": "tomcat10-admin-webapps-10.1.40-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-doc-10.1.40-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.aarch64"
        },
        "product_reference": "tomcat10-doc-10.1.40-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-doc-10.1.40-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.ppc64le"
        },
        "product_reference": "tomcat10-doc-10.1.40-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-doc-10.1.40-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.s390x"
        },
        "product_reference": "tomcat10-doc-10.1.40-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-doc-10.1.40-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.x86_64"
        },
        "product_reference": "tomcat10-doc-10.1.40-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-docs-webapp-10.1.40-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.aarch64"
        },
        "product_reference": "tomcat10-docs-webapp-10.1.40-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-docs-webapp-10.1.40-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.ppc64le"
        },
        "product_reference": "tomcat10-docs-webapp-10.1.40-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-docs-webapp-10.1.40-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.s390x"
        },
        "product_reference": "tomcat10-docs-webapp-10.1.40-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-docs-webapp-10.1.40-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.x86_64"
        },
        "product_reference": "tomcat10-docs-webapp-10.1.40-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-el-5_0-api-10.1.40-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.aarch64"
        },
        "product_reference": "tomcat10-el-5_0-api-10.1.40-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-el-5_0-api-10.1.40-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.ppc64le"
        },
        "product_reference": "tomcat10-el-5_0-api-10.1.40-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-el-5_0-api-10.1.40-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.s390x"
        },
        "product_reference": "tomcat10-el-5_0-api-10.1.40-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-el-5_0-api-10.1.40-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.x86_64"
        },
        "product_reference": "tomcat10-el-5_0-api-10.1.40-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-embed-10.1.40-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.aarch64"
        },
        "product_reference": "tomcat10-embed-10.1.40-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-embed-10.1.40-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.ppc64le"
        },
        "product_reference": "tomcat10-embed-10.1.40-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-embed-10.1.40-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.s390x"
        },
        "product_reference": "tomcat10-embed-10.1.40-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-embed-10.1.40-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.x86_64"
        },
        "product_reference": "tomcat10-embed-10.1.40-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-jsp-3_1-api-10.1.40-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.aarch64"
        },
        "product_reference": "tomcat10-jsp-3_1-api-10.1.40-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-jsp-3_1-api-10.1.40-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.ppc64le"
        },
        "product_reference": "tomcat10-jsp-3_1-api-10.1.40-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-jsp-3_1-api-10.1.40-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.s390x"
        },
        "product_reference": "tomcat10-jsp-3_1-api-10.1.40-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-jsp-3_1-api-10.1.40-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.x86_64"
        },
        "product_reference": "tomcat10-jsp-3_1-api-10.1.40-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-jsvc-10.1.40-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.aarch64"
        },
        "product_reference": "tomcat10-jsvc-10.1.40-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-jsvc-10.1.40-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.ppc64le"
        },
        "product_reference": "tomcat10-jsvc-10.1.40-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-jsvc-10.1.40-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.s390x"
        },
        "product_reference": "tomcat10-jsvc-10.1.40-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-jsvc-10.1.40-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.x86_64"
        },
        "product_reference": "tomcat10-jsvc-10.1.40-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-lib-10.1.40-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.aarch64"
        },
        "product_reference": "tomcat10-lib-10.1.40-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-lib-10.1.40-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.ppc64le"
        },
        "product_reference": "tomcat10-lib-10.1.40-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-lib-10.1.40-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.s390x"
        },
        "product_reference": "tomcat10-lib-10.1.40-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-lib-10.1.40-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.x86_64"
        },
        "product_reference": "tomcat10-lib-10.1.40-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-servlet-6_0-api-10.1.40-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.aarch64"
        },
        "product_reference": "tomcat10-servlet-6_0-api-10.1.40-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-servlet-6_0-api-10.1.40-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.ppc64le"
        },
        "product_reference": "tomcat10-servlet-6_0-api-10.1.40-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-servlet-6_0-api-10.1.40-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.s390x"
        },
        "product_reference": "tomcat10-servlet-6_0-api-10.1.40-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-servlet-6_0-api-10.1.40-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.x86_64"
        },
        "product_reference": "tomcat10-servlet-6_0-api-10.1.40-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-webapps-10.1.40-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.aarch64"
        },
        "product_reference": "tomcat10-webapps-10.1.40-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-webapps-10.1.40-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.ppc64le"
        },
        "product_reference": "tomcat10-webapps-10.1.40-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-webapps-10.1.40-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.s390x"
        },
        "product_reference": "tomcat10-webapps-10.1.40-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat10-webapps-10.1.40-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.x86_64"
        },
        "product_reference": "tomcat10-webapps-10.1.40-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-31650",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-31650"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A large number of such requests could trigger an OutOfMemoryException resulting in a denial of service.\n\nThis issue affects Apache Tomcat: from 9.0.76 through 9.0.102, from 10.1.10 through 10.1.39, from 11.0.0-M2 through 11.0.5.\n\nUsers are recommended to upgrade to version 9.0.104, 10.1.40 or 11.0.6 which fix the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.s390x",
          "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.s390x",
          "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.s390x",
          "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.s390x",
          "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.s390x",
          "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.s390x",
          "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.s390x",
          "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.s390x",
          "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.s390x",
          "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.s390x",
          "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.s390x",
          "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-31650",
          "url": "https://www.suse.com/security/cve/CVE-2025-31650"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1242008 for CVE-2025-31650",
          "url": "https://bugzilla.suse.com/1242008"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-05-02T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-31650"
    },
    {
      "cve": "CVE-2025-31651",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-31651"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat.  For a subset of unlikely rewrite rule configurations, it was possible \nfor a specially crafted request to bypass some rewrite rules. If those \nrewrite rules effectively enforced security constraints, those \nconstraints could be bypassed.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.5, from 10.1.0-M1 through 10.1.39, from 9.0.0.M1 through 9.0.102.\n\nUsers are recommended to upgrade to version [FIXED_VERSION], which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.s390x",
          "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.s390x",
          "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.s390x",
          "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.s390x",
          "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.s390x",
          "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.s390x",
          "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.s390x",
          "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.s390x",
          "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.s390x",
          "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.s390x",
          "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.s390x",
          "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-31651",
          "url": "https://www.suse.com/security/cve/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1242009 for CVE-2025-31651",
          "url": "https://bugzilla.suse.com/1242009"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-admin-webapps-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-doc-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-docs-webapp-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-el-5_0-api-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-embed-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-jsp-3_1-api-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-jsvc-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-lib-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-servlet-6_0-api-10.1.40-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.s390x",
            "openSUSE Tumbleweed:tomcat10-webapps-10.1.40-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-05-02T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-31651"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "tomcat-9.0.104-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the tomcat-9.0.104-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2025-15048",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15048-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-31650 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-31650/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-31651 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-31651/"
      }
    ],
    "title": "tomcat-9.0.104-1.1 on GA media",
    "tracking": {
      "current_release_date": "2025-05-02T00:00:00Z",
      "generator": {
        "date": "2025-05-02T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2025:15048-1",
      "initial_release_date": "2025-05-02T00:00:00Z",
      "revision_history": [
        {
          "date": "2025-05-02T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat-9.0.104-1.1.aarch64",
                "product": {
                  "name": "tomcat-9.0.104-1.1.aarch64",
                  "product_id": "tomcat-9.0.104-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-admin-webapps-9.0.104-1.1.aarch64",
                "product": {
                  "name": "tomcat-admin-webapps-9.0.104-1.1.aarch64",
                  "product_id": "tomcat-admin-webapps-9.0.104-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-docs-webapp-9.0.104-1.1.aarch64",
                "product": {
                  "name": "tomcat-docs-webapp-9.0.104-1.1.aarch64",
                  "product_id": "tomcat-docs-webapp-9.0.104-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-el-3_0-api-9.0.104-1.1.aarch64",
                "product": {
                  "name": "tomcat-el-3_0-api-9.0.104-1.1.aarch64",
                  "product_id": "tomcat-el-3_0-api-9.0.104-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-embed-9.0.104-1.1.aarch64",
                "product": {
                  "name": "tomcat-embed-9.0.104-1.1.aarch64",
                  "product_id": "tomcat-embed-9.0.104-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-javadoc-9.0.104-1.1.aarch64",
                "product": {
                  "name": "tomcat-javadoc-9.0.104-1.1.aarch64",
                  "product_id": "tomcat-javadoc-9.0.104-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-jsp-2_3-api-9.0.104-1.1.aarch64",
                "product": {
                  "name": "tomcat-jsp-2_3-api-9.0.104-1.1.aarch64",
                  "product_id": "tomcat-jsp-2_3-api-9.0.104-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-jsvc-9.0.104-1.1.aarch64",
                "product": {
                  "name": "tomcat-jsvc-9.0.104-1.1.aarch64",
                  "product_id": "tomcat-jsvc-9.0.104-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-lib-9.0.104-1.1.aarch64",
                "product": {
                  "name": "tomcat-lib-9.0.104-1.1.aarch64",
                  "product_id": "tomcat-lib-9.0.104-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-servlet-4_0-api-9.0.104-1.1.aarch64",
                "product": {
                  "name": "tomcat-servlet-4_0-api-9.0.104-1.1.aarch64",
                  "product_id": "tomcat-servlet-4_0-api-9.0.104-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-webapps-9.0.104-1.1.aarch64",
                "product": {
                  "name": "tomcat-webapps-9.0.104-1.1.aarch64",
                  "product_id": "tomcat-webapps-9.0.104-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat-9.0.104-1.1.ppc64le",
                "product": {
                  "name": "tomcat-9.0.104-1.1.ppc64le",
                  "product_id": "tomcat-9.0.104-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-admin-webapps-9.0.104-1.1.ppc64le",
                "product": {
                  "name": "tomcat-admin-webapps-9.0.104-1.1.ppc64le",
                  "product_id": "tomcat-admin-webapps-9.0.104-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-docs-webapp-9.0.104-1.1.ppc64le",
                "product": {
                  "name": "tomcat-docs-webapp-9.0.104-1.1.ppc64le",
                  "product_id": "tomcat-docs-webapp-9.0.104-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-el-3_0-api-9.0.104-1.1.ppc64le",
                "product": {
                  "name": "tomcat-el-3_0-api-9.0.104-1.1.ppc64le",
                  "product_id": "tomcat-el-3_0-api-9.0.104-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-embed-9.0.104-1.1.ppc64le",
                "product": {
                  "name": "tomcat-embed-9.0.104-1.1.ppc64le",
                  "product_id": "tomcat-embed-9.0.104-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-javadoc-9.0.104-1.1.ppc64le",
                "product": {
                  "name": "tomcat-javadoc-9.0.104-1.1.ppc64le",
                  "product_id": "tomcat-javadoc-9.0.104-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-jsp-2_3-api-9.0.104-1.1.ppc64le",
                "product": {
                  "name": "tomcat-jsp-2_3-api-9.0.104-1.1.ppc64le",
                  "product_id": "tomcat-jsp-2_3-api-9.0.104-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-jsvc-9.0.104-1.1.ppc64le",
                "product": {
                  "name": "tomcat-jsvc-9.0.104-1.1.ppc64le",
                  "product_id": "tomcat-jsvc-9.0.104-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-lib-9.0.104-1.1.ppc64le",
                "product": {
                  "name": "tomcat-lib-9.0.104-1.1.ppc64le",
                  "product_id": "tomcat-lib-9.0.104-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-servlet-4_0-api-9.0.104-1.1.ppc64le",
                "product": {
                  "name": "tomcat-servlet-4_0-api-9.0.104-1.1.ppc64le",
                  "product_id": "tomcat-servlet-4_0-api-9.0.104-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-webapps-9.0.104-1.1.ppc64le",
                "product": {
                  "name": "tomcat-webapps-9.0.104-1.1.ppc64le",
                  "product_id": "tomcat-webapps-9.0.104-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat-9.0.104-1.1.s390x",
                "product": {
                  "name": "tomcat-9.0.104-1.1.s390x",
                  "product_id": "tomcat-9.0.104-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-admin-webapps-9.0.104-1.1.s390x",
                "product": {
                  "name": "tomcat-admin-webapps-9.0.104-1.1.s390x",
                  "product_id": "tomcat-admin-webapps-9.0.104-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-docs-webapp-9.0.104-1.1.s390x",
                "product": {
                  "name": "tomcat-docs-webapp-9.0.104-1.1.s390x",
                  "product_id": "tomcat-docs-webapp-9.0.104-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-el-3_0-api-9.0.104-1.1.s390x",
                "product": {
                  "name": "tomcat-el-3_0-api-9.0.104-1.1.s390x",
                  "product_id": "tomcat-el-3_0-api-9.0.104-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-embed-9.0.104-1.1.s390x",
                "product": {
                  "name": "tomcat-embed-9.0.104-1.1.s390x",
                  "product_id": "tomcat-embed-9.0.104-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-javadoc-9.0.104-1.1.s390x",
                "product": {
                  "name": "tomcat-javadoc-9.0.104-1.1.s390x",
                  "product_id": "tomcat-javadoc-9.0.104-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-jsp-2_3-api-9.0.104-1.1.s390x",
                "product": {
                  "name": "tomcat-jsp-2_3-api-9.0.104-1.1.s390x",
                  "product_id": "tomcat-jsp-2_3-api-9.0.104-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-jsvc-9.0.104-1.1.s390x",
                "product": {
                  "name": "tomcat-jsvc-9.0.104-1.1.s390x",
                  "product_id": "tomcat-jsvc-9.0.104-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-lib-9.0.104-1.1.s390x",
                "product": {
                  "name": "tomcat-lib-9.0.104-1.1.s390x",
                  "product_id": "tomcat-lib-9.0.104-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-servlet-4_0-api-9.0.104-1.1.s390x",
                "product": {
                  "name": "tomcat-servlet-4_0-api-9.0.104-1.1.s390x",
                  "product_id": "tomcat-servlet-4_0-api-9.0.104-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-webapps-9.0.104-1.1.s390x",
                "product": {
                  "name": "tomcat-webapps-9.0.104-1.1.s390x",
                  "product_id": "tomcat-webapps-9.0.104-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat-9.0.104-1.1.x86_64",
                "product": {
                  "name": "tomcat-9.0.104-1.1.x86_64",
                  "product_id": "tomcat-9.0.104-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-admin-webapps-9.0.104-1.1.x86_64",
                "product": {
                  "name": "tomcat-admin-webapps-9.0.104-1.1.x86_64",
                  "product_id": "tomcat-admin-webapps-9.0.104-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-docs-webapp-9.0.104-1.1.x86_64",
                "product": {
                  "name": "tomcat-docs-webapp-9.0.104-1.1.x86_64",
                  "product_id": "tomcat-docs-webapp-9.0.104-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-el-3_0-api-9.0.104-1.1.x86_64",
                "product": {
                  "name": "tomcat-el-3_0-api-9.0.104-1.1.x86_64",
                  "product_id": "tomcat-el-3_0-api-9.0.104-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-embed-9.0.104-1.1.x86_64",
                "product": {
                  "name": "tomcat-embed-9.0.104-1.1.x86_64",
                  "product_id": "tomcat-embed-9.0.104-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-javadoc-9.0.104-1.1.x86_64",
                "product": {
                  "name": "tomcat-javadoc-9.0.104-1.1.x86_64",
                  "product_id": "tomcat-javadoc-9.0.104-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-jsp-2_3-api-9.0.104-1.1.x86_64",
                "product": {
                  "name": "tomcat-jsp-2_3-api-9.0.104-1.1.x86_64",
                  "product_id": "tomcat-jsp-2_3-api-9.0.104-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-jsvc-9.0.104-1.1.x86_64",
                "product": {
                  "name": "tomcat-jsvc-9.0.104-1.1.x86_64",
                  "product_id": "tomcat-jsvc-9.0.104-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-lib-9.0.104-1.1.x86_64",
                "product": {
                  "name": "tomcat-lib-9.0.104-1.1.x86_64",
                  "product_id": "tomcat-lib-9.0.104-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-servlet-4_0-api-9.0.104-1.1.x86_64",
                "product": {
                  "name": "tomcat-servlet-4_0-api-9.0.104-1.1.x86_64",
                  "product_id": "tomcat-servlet-4_0-api-9.0.104-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-webapps-9.0.104-1.1.x86_64",
                "product": {
                  "name": "tomcat-webapps-9.0.104-1.1.x86_64",
                  "product_id": "tomcat-webapps-9.0.104-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-9.0.104-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-9.0.104-1.1.aarch64"
        },
        "product_reference": "tomcat-9.0.104-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-9.0.104-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-9.0.104-1.1.ppc64le"
        },
        "product_reference": "tomcat-9.0.104-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-9.0.104-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-9.0.104-1.1.s390x"
        },
        "product_reference": "tomcat-9.0.104-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-9.0.104-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-9.0.104-1.1.x86_64"
        },
        "product_reference": "tomcat-9.0.104-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-admin-webapps-9.0.104-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.aarch64"
        },
        "product_reference": "tomcat-admin-webapps-9.0.104-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-admin-webapps-9.0.104-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.ppc64le"
        },
        "product_reference": "tomcat-admin-webapps-9.0.104-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-admin-webapps-9.0.104-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.s390x"
        },
        "product_reference": "tomcat-admin-webapps-9.0.104-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-admin-webapps-9.0.104-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.x86_64"
        },
        "product_reference": "tomcat-admin-webapps-9.0.104-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-docs-webapp-9.0.104-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.aarch64"
        },
        "product_reference": "tomcat-docs-webapp-9.0.104-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-docs-webapp-9.0.104-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.ppc64le"
        },
        "product_reference": "tomcat-docs-webapp-9.0.104-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-docs-webapp-9.0.104-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.s390x"
        },
        "product_reference": "tomcat-docs-webapp-9.0.104-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-docs-webapp-9.0.104-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.x86_64"
        },
        "product_reference": "tomcat-docs-webapp-9.0.104-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-el-3_0-api-9.0.104-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.aarch64"
        },
        "product_reference": "tomcat-el-3_0-api-9.0.104-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-el-3_0-api-9.0.104-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.ppc64le"
        },
        "product_reference": "tomcat-el-3_0-api-9.0.104-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-el-3_0-api-9.0.104-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.s390x"
        },
        "product_reference": "tomcat-el-3_0-api-9.0.104-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-el-3_0-api-9.0.104-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.x86_64"
        },
        "product_reference": "tomcat-el-3_0-api-9.0.104-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-embed-9.0.104-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.aarch64"
        },
        "product_reference": "tomcat-embed-9.0.104-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-embed-9.0.104-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.ppc64le"
        },
        "product_reference": "tomcat-embed-9.0.104-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-embed-9.0.104-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.s390x"
        },
        "product_reference": "tomcat-embed-9.0.104-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-embed-9.0.104-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.x86_64"
        },
        "product_reference": "tomcat-embed-9.0.104-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-javadoc-9.0.104-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.aarch64"
        },
        "product_reference": "tomcat-javadoc-9.0.104-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-javadoc-9.0.104-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.ppc64le"
        },
        "product_reference": "tomcat-javadoc-9.0.104-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-javadoc-9.0.104-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.s390x"
        },
        "product_reference": "tomcat-javadoc-9.0.104-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-javadoc-9.0.104-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.x86_64"
        },
        "product_reference": "tomcat-javadoc-9.0.104-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-jsp-2_3-api-9.0.104-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.aarch64"
        },
        "product_reference": "tomcat-jsp-2_3-api-9.0.104-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-jsp-2_3-api-9.0.104-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.ppc64le"
        },
        "product_reference": "tomcat-jsp-2_3-api-9.0.104-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-jsp-2_3-api-9.0.104-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.s390x"
        },
        "product_reference": "tomcat-jsp-2_3-api-9.0.104-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-jsp-2_3-api-9.0.104-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.x86_64"
        },
        "product_reference": "tomcat-jsp-2_3-api-9.0.104-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-jsvc-9.0.104-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.aarch64"
        },
        "product_reference": "tomcat-jsvc-9.0.104-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-jsvc-9.0.104-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.ppc64le"
        },
        "product_reference": "tomcat-jsvc-9.0.104-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-jsvc-9.0.104-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.s390x"
        },
        "product_reference": "tomcat-jsvc-9.0.104-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-jsvc-9.0.104-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.x86_64"
        },
        "product_reference": "tomcat-jsvc-9.0.104-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-lib-9.0.104-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.aarch64"
        },
        "product_reference": "tomcat-lib-9.0.104-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-lib-9.0.104-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.ppc64le"
        },
        "product_reference": "tomcat-lib-9.0.104-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-lib-9.0.104-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.s390x"
        },
        "product_reference": "tomcat-lib-9.0.104-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-lib-9.0.104-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.x86_64"
        },
        "product_reference": "tomcat-lib-9.0.104-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-servlet-4_0-api-9.0.104-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.aarch64"
        },
        "product_reference": "tomcat-servlet-4_0-api-9.0.104-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-servlet-4_0-api-9.0.104-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.ppc64le"
        },
        "product_reference": "tomcat-servlet-4_0-api-9.0.104-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-servlet-4_0-api-9.0.104-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.s390x"
        },
        "product_reference": "tomcat-servlet-4_0-api-9.0.104-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-servlet-4_0-api-9.0.104-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.x86_64"
        },
        "product_reference": "tomcat-servlet-4_0-api-9.0.104-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-webapps-9.0.104-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.aarch64"
        },
        "product_reference": "tomcat-webapps-9.0.104-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-webapps-9.0.104-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.ppc64le"
        },
        "product_reference": "tomcat-webapps-9.0.104-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-webapps-9.0.104-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.s390x"
        },
        "product_reference": "tomcat-webapps-9.0.104-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-webapps-9.0.104-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.x86_64"
        },
        "product_reference": "tomcat-webapps-9.0.104-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-31650",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-31650"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A large number of such requests could trigger an OutOfMemoryException resulting in a denial of service.\n\nThis issue affects Apache Tomcat: from 9.0.76 through 9.0.102, from 10.1.10 through 10.1.39, from 11.0.0-M2 through 11.0.5.\n\nUsers are recommended to upgrade to version 9.0.104, 10.1.40 or 11.0.6 which fix the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:tomcat-9.0.104-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat-9.0.104-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat-9.0.104-1.1.s390x",
          "openSUSE Tumbleweed:tomcat-9.0.104-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.s390x",
          "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.s390x",
          "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.s390x",
          "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.s390x",
          "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.s390x",
          "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.s390x",
          "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.s390x",
          "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.s390x",
          "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.s390x",
          "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.s390x",
          "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-31650",
          "url": "https://www.suse.com/security/cve/CVE-2025-31650"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1242008 for CVE-2025-31650",
          "url": "https://bugzilla.suse.com/1242008"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:tomcat-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:tomcat-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-05-02T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-31650"
    },
    {
      "cve": "CVE-2025-31651",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-31651"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat.  For a subset of unlikely rewrite rule configurations, it was possible \nfor a specially crafted request to bypass some rewrite rules. If those \nrewrite rules effectively enforced security constraints, those \nconstraints could be bypassed.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.5, from 10.1.0-M1 through 10.1.39, from 9.0.0.M1 through 9.0.102.\n\nUsers are recommended to upgrade to version [FIXED_VERSION], which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:tomcat-9.0.104-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat-9.0.104-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat-9.0.104-1.1.s390x",
          "openSUSE Tumbleweed:tomcat-9.0.104-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.s390x",
          "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.s390x",
          "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.s390x",
          "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.s390x",
          "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.s390x",
          "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.s390x",
          "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.s390x",
          "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.s390x",
          "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.s390x",
          "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.x86_64",
          "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.aarch64",
          "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.ppc64le",
          "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.s390x",
          "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-31651",
          "url": "https://www.suse.com/security/cve/CVE-2025-31651"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1242009 for CVE-2025-31651",
          "url": "https://bugzilla.suse.com/1242009"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:tomcat-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:tomcat-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-admin-webapps-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-docs-webapp-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-el-3_0-api-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-embed-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-javadoc-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-jsp-2_3-api-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-jsvc-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-lib-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-servlet-4_0-api-9.0.104-1.1.x86_64",
            "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.aarch64",
            "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.ppc64le",
            "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.s390x",
            "openSUSE Tumbleweed:tomcat-webapps-9.0.104-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-05-02T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-31651"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Apache Tomcat ist ein Web-Applikationsserver f\u00fcr verschiedene Plattformen.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Apache Tomcat ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren, oder Sicherheitsvorkehrungen zu umgehen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-0895 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0895.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-0895 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0895"
      },
      {
        "category": "external",
        "summary": "Lists Apache.org vom 2025-04-28",
        "url": "https://lists.apache.org/thread/j6zzk0y3yym9pzfzkq5vcyxzz0yzh826"
      },
      {
        "category": "external",
        "summary": "Lists Apache.org vom 2025-04-28",
        "url": "https://lists.apache.org/thread/cpklvqwvdrp4k9hmd2l3q33j0gzy4fox"
      },
      {
        "category": "external",
        "summary": "OSS Security Mailing List vom 2025-04-28",
        "url": "https://seclists.org/oss-sec/2025/q2/100"
      },
      {
        "category": "external",
        "summary": "OSS Security Mailing List vom 2025-04-28",
        "url": "https://seclists.org/oss-sec/2025/q2/101"
      },
      {
        "category": "external",
        "summary": "GitHub Advisory Database vom 2025-04-28",
        "url": "https://github.com/advisories/GHSA-3p2h-wqq4-wf4h"
      },
      {
        "category": "external",
        "summary": "GitHub Advisory Database vom 2025-04-28",
        "url": "https://github.com/advisories/GHSA-ff77-26x5-69cr"
      },
      {
        "category": "external",
        "summary": "PoC CVE-2025-31650 vom 2025-04-29",
        "url": "https://github.com/tunahantekeoglu/CVE-2025-31650"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:1521-1 vom 2025-05-09",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/RFTKW33WAI4B3WZ5ZCAZYPZAMSCNNSM4/"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:1537-1 vom 2025-05-13",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/WLX5T7LK4QQHONBUWBDVFGFTQU32S6PX/"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALASTOMCAT9-2025-017 vom 2025-05-14",
        "url": "https://alas.aws.amazon.com/AL2/ALASTOMCAT9-2025-017.html"
      },
      {
        "category": "external",
        "summary": "Atlassian Security Advisory",
        "url": "https://jira.atlassian.com/browse/BAM-26105"
      },
      {
        "category": "external",
        "summary": "Atlassian Security Advisory",
        "url": "https://jira.atlassian.com/browse/CONFSERVER-99686"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7234040 vom 2025-05-21",
        "url": "https://www.ibm.com/support/pages/node/7234040"
      },
      {
        "category": "external",
        "summary": "Atlassian Security Advisory",
        "url": "https://jira.atlassian.com/browse/CONFSERVER-99568"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALASTOMCAT9-2025-018 vom 2025-05-29",
        "url": "https://alas.aws.amazon.com/AL2/ALASTOMCAT9-2025-018.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:01521-1 vom 2025-05-29",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-May/020943.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:01537-1 vom 2025-05-29",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-May/020935.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:01882-1 vom 2025-06-11",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021460.html"
      },
      {
        "category": "external",
        "summary": "Atlassian Security Advisory JSWSERVER-26411 vom 2025-06-17",
        "url": "https://confluence.atlassian.com/security/security-bulletin-june-17-2025-1574012717.html"
      },
      {
        "category": "external",
        "summary": "Trellix 2025 Update 5 Release Notes vom 2025-06-25",
        "url": "https://docs.trellix.com/bundle/epolicy-orchestrator-saas-release-notes/page/UUID-bdfa33f8-426e-ec2b-a46a-a50c7743b530.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS2TOMCAT9-2025-018 vom 2025-06-30",
        "url": "https://alas.aws.amazon.com/AL2/ALAS2TOMCAT9-2025-018.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS2TOMCAT9-2025-017 vom 2025-06-30",
        "url": "https://alas.aws.amazon.com/AL2/ALAS2TOMCAT9-2025-017.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-11335 vom 2025-07-17",
        "url": "https://linux.oracle.com/errata/ELSA-2025-11335.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:11335 vom 2025-07-16",
        "url": "https://access.redhat.com/errata/RHSA-2025:11335"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:11332 vom 2025-07-16",
        "url": "https://access.redhat.com/errata/RHSA-2025:11332"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:11333 vom 2025-07-16",
        "url": "https://access.redhat.com/errata/RHSA-2025:11333"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:11334 vom 2025-07-16",
        "url": "https://access.redhat.com/errata/RHSA-2025:11334"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-11333 vom 2025-07-17",
        "url": "https://linux.oracle.com/errata/ELSA-2025-11333.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:11381 vom 2025-07-17",
        "url": "https://access.redhat.com/errata/RHSA-2025:11381"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:11382 vom 2025-07-17",
        "url": "https://access.redhat.com/errata/RHSA-2025:11382"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-11332 vom 2025-07-17",
        "url": "https://linux.oracle.com/errata/ELSA-2025-11332.html"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-4244 vom 2025-07-22",
        "url": "https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html"
      },
      {
        "category": "external",
        "summary": "HCL Security Bulletin  vom 2025-08-05",
        "url": "https://support.hcl-software.com/community?id=community_blog\u0026sys_id=4cd4383f3bcb26d828f8f547f4e45af6"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7241547 vom 2025-08-06",
        "url": "https://www.ibm.com/support/pages/node/7241547"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-7705-1 vom 2025-08-20",
        "url": "https://ubuntu.com/security/notices/USN-7705-1"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2025-309 vom 2025-09-08",
        "url": "https://www.dell.com/support/kbdoc/de-de/000362754/dsa-2025-309-security-update-for-dell-networker-apache-tomcat-vulnerabilities"
      },
      {
        "category": "external",
        "summary": "SAS Security Update vom 2025-10-02",
        "url": "https://support.sas.com/en/security-bulletins/sas-security-update-for-sas-94m9-ts1m9.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19810 vom 2025-11-06",
        "url": "https://access.redhat.com/errata/RHSA-2025:19810"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19809 vom 2025-11-06",
        "url": "https://access.redhat.com/errata/RHSA-2025:19809"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7252039 vom 2025-11-20",
        "url": "https://www.ibm.com/support/pages/node/7252039"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:22924 vom 2025-12-09",
        "url": "https://access.redhat.com/errata/RHSA-2025:22924"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:22925 vom 2025-12-09",
        "url": "https://access.redhat.com/errata/RHSA-2025:22925"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-23049 vom 2025-12-11",
        "url": "http://linux.oracle.com/errata/ELSA-2025-23049.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-23050 vom 2025-12-11",
        "url": "https://linux.oracle.com/errata/ELSA-2025-23050.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-23052 vom 2025-12-11",
        "url": "http://linux.oracle.com/errata/ELSA-2025-23052.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:23053 vom 2025-12-10",
        "url": "https://access.redhat.com/errata/RHSA-2025:23053"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:23051 vom 2025-12-10",
        "url": "https://access.redhat.com/errata/RHSA-2025:23051"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:23050 vom 2025-12-10",
        "url": "https://access.redhat.com/errata/RHSA-2025:23050"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:23052 vom 2025-12-10",
        "url": "https://access.redhat.com/errata/RHSA-2025:23052"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:23049 vom 2025-12-10",
        "url": "https://access.redhat.com/errata/RHSA-2025:23049"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:23048 vom 2025-12-10",
        "url": "https://access.redhat.com/errata/RHSA-2025:23048"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:23047 vom 2025-12-10",
        "url": "https://access.redhat.com/errata/RHSA-2025:23047"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:23046 vom 2025-12-10",
        "url": "https://access.redhat.com/errata/RHSA-2025:23046"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:23045 vom 2025-12-10",
        "url": "https://access.redhat.com/errata/RHSA-2025:23045"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:23044 vom 2025-12-10",
        "url": "https://access.redhat.com/errata/RHSA-2025:23044"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2025:23049 vom 2025-12-11",
        "url": "https://errata.build.resf.org/RLSA-2025:23049"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-23048 vom 2025-12-11",
        "url": "http://linux.oracle.com/errata/ELSA-2025-23048.html"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2025:23050 vom 2025-12-12",
        "url": "https://errata.build.resf.org/RLSA-2025:23050"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2025:23052 vom 2025-12-12",
        "url": "https://errata.build.resf.org/RLSA-2025:23052"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2025:23048 vom 2025-12-13",
        "url": "https://errata.build.resf.org/RLSA-2025:23048"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:0292 vom 2026-01-08",
        "url": "https://access.redhat.com/errata/RHSA-2026:0292"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:0293 vom 2026-01-08",
        "url": "https://access.redhat.com/errata/RHSA-2026:0293"
      }
    ],
    "source_lang": "en-US",
    "title": "Apache Tomcat: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-01-07T23:00:00.000+00:00",
      "generator": {
        "date": "2026-01-08T08:11:50.522+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2025-0895",
      "initial_release_date": "2025-04-28T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-04-28T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2025-04-29T22:00:00.000+00:00",
          "number": "2",
          "summary": "PoC f\u00fcr CVE-2025-31650 aufgenommen"
        },
        {
          "date": "2025-05-08T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-05-12T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-05-13T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2025-05-20T22:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von Atlassian und IBM aufgenommen"
        },
        {
          "date": "2025-05-29T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von Amazon und SUSE aufgenommen"
        },
        {
          "date": "2025-06-10T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-06-17T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von Atlassian aufgenommen"
        },
        {
          "date": "2025-06-24T22:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates aufgenommen"
        },
        {
          "date": "2025-06-30T22:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2025-07-16T22:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von Oracle Linux und Red Hat aufgenommen"
        },
        {
          "date": "2025-07-17T22:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2025-07-21T22:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2025-08-05T22:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von HCL aufgenommen"
        },
        {
          "date": "2025-08-06T22:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2025-08-19T22:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2025-09-07T22:00:00.000+00:00",
          "number": "18",
          "summary": "Neue Updates von Dell aufgenommen"
        },
        {
          "date": "2025-10-05T22:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates aufgenommen"
        },
        {
          "date": "2025-11-06T23:00:00.000+00:00",
          "number": "20",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-11-19T23:00:00.000+00:00",
          "number": "21",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2025-12-09T23:00:00.000+00:00",
          "number": "22",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-12-10T23:00:00.000+00:00",
          "number": "23",
          "summary": "Neue Updates von Oracle Linux, Red Hat und Rocky Enterprise Software Foundation aufgenommen"
        },
        {
          "date": "2025-12-11T23:00:00.000+00:00",
          "number": "24",
          "summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen"
        },
        {
          "date": "2025-12-14T23:00:00.000+00:00",
          "number": "25",
          "summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen"
        },
        {
          "date": "2026-01-07T23:00:00.000+00:00",
          "number": "26",
          "summary": "Neue Updates von Red Hat aufgenommen"
        }
      ],
      "status": "final",
      "version": "26"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c11.0.6",
                "product": {
                  "name": "Apache Tomcat \u003c11.0.6",
                  "product_id": "T043183"
                }
              },
              {
                "category": "product_version",
                "name": "11.0.6",
                "product": {
                  "name": "Apache Tomcat 11.0.6",
                  "product_id": "T043183-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:apache:tomcat:11.0.6"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c10.1.40",
                "product": {
                  "name": "Apache Tomcat \u003c10.1.40",
                  "product_id": "T043184"
                }
              },
              {
                "category": "product_version",
                "name": "10.1.40",
                "product": {
                  "name": "Apache Tomcat 10.1.40",
                  "product_id": "T043184-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:apache:tomcat:10.1.40"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c9.0.104",
                "product": {
                  "name": "Apache Tomcat \u003c9.0.104",
                  "product_id": "T043185"
                }
              },
              {
                "category": "product_version",
                "name": "9.0.104",
                "product": {
                  "name": "Apache Tomcat 9.0.104",
                  "product_id": "T043185-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:apache:tomcat:9.0.104"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Tomcat"
          }
        ],
        "category": "vendor",
        "name": "Apache"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c10.2.4",
                "product": {
                  "name": "Atlassian Bamboo \u003c10.2.4",
                  "product_id": "T044013"
                }
              },
              {
                "category": "product_version",
                "name": "10.2.4",
                "product": {
                  "name": "Atlassian Bamboo 10.2.4",
                  "product_id": "T044013-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:bamboo:10.2.4"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c9.6.13",
                "product": {
                  "name": "Atlassian Bamboo \u003c9.6.13",
                  "product_id": "T044014"
                }
              },
              {
                "category": "product_version",
                "name": "9.6.13",
                "product": {
                  "name": "Atlassian Bamboo 9.6.13",
                  "product_id": "T044014-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:bamboo:9.6.13"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c11.0.1",
                "product": {
                  "name": "Atlassian Bamboo \u003c11.0.1",
                  "product_id": "T044015"
                }
              },
              {
                "category": "product_version",
                "name": "11.0.1",
                "product": {
                  "name": "Atlassian Bamboo 11.0.1",
                  "product_id": "T044015-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:bamboo:11.0.1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Bamboo"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c9.2.2",
                "product": {
                  "name": "Atlassian Confluence \u003c9.2.2",
                  "product_id": "T042904"
                }
              },
              {
                "category": "product_version",
                "name": "9.2.2",
                "product": {
                  "name": "Atlassian Confluence 9.2.2",
                  "product_id": "T042904-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:confluence:data_center_and_server__9.2.2"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c9.3.2",
                "product": {
                  "name": "Atlassian Confluence \u003c9.3.2",
                  "product_id": "T042906"
                }
              },
              {
                "category": "product_version",
                "name": "9.3.2",
                "product": {
                  "name": "Atlassian Confluence 9.3.2",
                  "product_id": "T042906-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:confluence:data_center_and_server__9.3.2"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c8.5.21",
                "product": {
                  "name": "Atlassian Confluence \u003c8.5.21",
                  "product_id": "T042909"
                }
              },
              {
                "category": "product_version",
                "name": "8.5.21",
                "product": {
                  "name": "Atlassian Confluence 8.5.21",
                  "product_id": "T042909-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:confluence:data_center_and_server__8.5.21"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c9.4.1",
                "product": {
                  "name": "Atlassian Confluence \u003c9.4.1",
                  "product_id": "T044016"
                }
              },
              {
                "category": "product_version",
                "name": "9.4.1",
                "product": {
                  "name": "Atlassian Confluence 9.4.1",
                  "product_id": "T044016-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:confluence:9.4.1"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c9.2.4",
                "product": {
                  "name": "Atlassian Confluence \u003c9.2.4",
                  "product_id": "T044017"
                }
              },
              {
                "category": "product_version",
                "name": "9.2.4",
                "product": {
                  "name": "Atlassian Confluence 9.2.4",
                  "product_id": "T044017-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:confluence:9.2.4"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c8.5.22",
                "product": {
                  "name": "Atlassian Confluence \u003c8.5.22",
                  "product_id": "T044018"
                }
              },
              {
                "category": "product_version",
                "name": "8.5.22",
                "product": {
                  "name": "Atlassian Confluence 8.5.22",
                  "product_id": "T044018-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:confluence:8.5.22"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Confluence"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c10.6.1",
                "product": {
                  "name": "Atlassian Jira \u003c10.6.1",
                  "product_id": "T044689"
                }
              },
              {
                "category": "product_version",
                "name": "10.6.1",
                "product": {
                  "name": "Atlassian Jira 10.6.1",
                  "product_id": "T044689-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:jira:10.6.1"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c10.3.6 (LTS)",
                "product": {
                  "name": "Atlassian Jira \u003c10.3.6 (LTS)",
                  "product_id": "T044691"
                }
              },
              {
                "category": "product_version",
                "name": "10.3.6 (LTS)",
                "product": {
                  "name": "Atlassian Jira 10.3.6 (LTS)",
                  "product_id": "T044691-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:jira:10.3.6::lts"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Jira"
          }
        ],
        "category": "vendor",
        "name": "Atlassian"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c19.13.0.1",
                "product": {
                  "name": "Dell NetWorker \u003c19.13.0.1",
                  "product_id": "T046768"
                }
              },
              {
                "category": "product_version",
                "name": "19.13.0.1",
                "product": {
                  "name": "Dell NetWorker 19.13.0.1",
                  "product_id": "T046768-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:dell:networker:19.13.0.1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "NetWorker"
          }
        ],
        "category": "vendor",
        "name": "Dell"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c9.1.18.2",
                "product": {
                  "name": "HCL Commerce \u003c9.1.18.2",
                  "product_id": "T045896"
                }
              },
              {
                "category": "product_version",
                "name": "9.1.18.2",
                "product": {
                  "name": "HCL Commerce 9.1.18.2",
                  "product_id": "T045896-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:hcltechsw:commerce:9.1.18.2"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Commerce"
          }
        ],
        "category": "vendor",
        "name": "HCL"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "10.1.0.0-10.1.0.5",
                "product": {
                  "name": "IBM Integration Bus 10.1.0.0-10.1.0.5",
                  "product_id": "T044022",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:integration_bus:10.1.0.0_-_10.1.0.5"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Integration Bus"
          },
          {
            "category": "product_name",
            "name": "IBM Power Hardware Management Console",
            "product": {
              "name": "IBM Power Hardware Management Console",
              "product_id": "5114",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:hardware_management_console:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "11.5",
                "product": {
                  "name": "IBM Security Guardium 11.5",
                  "product_id": "1411051",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:security_guardium:11.5"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Security Guardium"
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "RESF Rocky Linux",
            "product": {
              "name": "RESF Rocky Linux",
              "product_id": "T032255",
              "product_identification_helper": {
                "cpe": "cpe:/o:resf:rocky_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "RESF"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Web Server",
                "product": {
                  "name": "Red Hat JBoss Web Server",
                  "product_id": "T003426",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:-"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c5.8.6",
                "product": {
                  "name": "Red Hat JBoss Web Server \u003c5.8.6",
                  "product_id": "T049206"
                }
              },
              {
                "category": "product_version",
                "name": "5.8.6",
                "product": {
                  "name": "Red Hat JBoss Web Server 5.8.6",
                  "product_id": "T049206-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:5.8.6"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "JBoss Web Server"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c9.4M9 (TS1M9)",
                "product": {
                  "name": "SAS Institute Base SAS \u003c9.4M9 (TS1M9)",
                  "product_id": "T047382"
                }
              },
              {
                "category": "product_version",
                "name": "9.4M9 (TS1M9)",
                "product": {
                  "name": "SAS Institute Base SAS 9.4M9 (TS1M9)",
                  "product_id": "T047382-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:sas:base_sas:9.4m9_%28ts1m9%29"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Base SAS"
          }
        ],
        "category": "vendor",
        "name": "SAS Institute"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c2025 Update 5",
                "product": {
                  "name": "Trellix ePolicy Orchestrator \u003c2025 Update 5",
                  "product_id": "T044835"
                }
              },
              {
                "category": "product_version",
                "name": "2025 Update 5",
                "product": {
                  "name": "Trellix ePolicy Orchestrator 2025 Update 5",
                  "product_id": "T044835-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:trellix:epolicy_orchestrator:2025_update_5"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "ePolicy Orchestrator"
          }
        ],
        "category": "vendor",
        "name": "Trellix"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-31650",
      "product_status": {
        "known_affected": [
          "T042909",
          "T047382",
          "67646",
          "T003426",
          "T042904",
          "T004914",
          "T042906",
          "T044016",
          "T044015",
          "T044018",
          "T044017",
          "T044835",
          "T043183",
          "398363",
          "T043184",
          "T043185",
          "T044691",
          "T049206",
          "T044014",
          "T044013",
          "5114",
          "T032255",
          "T045896",
          "T046768",
          "T044689",
          "2951",
          "T002207",
          "T000126",
          "T044022",
          "1411051"
        ]
      },
      "release_date": "2025-04-28T22:00:00.000+00:00",
      "title": "CVE-2025-31650"
    },
    {
      "cve": "CVE-2025-31651",
      "product_status": {
        "known_affected": [
          "T042909",
          "T047382",
          "67646",
          "T003426",
          "T042904",
          "T004914",
          "T042906",
          "T044016",
          "T044015",
          "T044018",
          "T044017",
          "T044835",
          "T043183",
          "398363",
          "T043184",
          "T043185",
          "T044691",
          "T049206",
          "T044014",
          "T044013",
          "5114",
          "T032255",
          "T045896",
          "T046768",
          "T044689",
          "2951",
          "T002207",
          "T000126",
          "T044022",
          "1411051"
        ]
      },
      "release_date": "2025-04-28T22:00:00.000+00:00",
      "title": "CVE-2025-31651"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Dell Secure Connect Gateway ist eine Softwarel\u00f6sung, die als sicherer, zentralisierter Punkt f\u00fcr die Verwaltung des Fernzugriffs und des Supports f\u00fcr Hardware und Software von Dell Technologies dient.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Dell Secure Connect Gateway ausnutzen, um einen nicht n\u00e4her spezifizierten Angriff durchzuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- Sonstiges\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-1439 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1439.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-1439 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1439"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2025-260 vom 2025-06-30",
        "url": "https://www.dell.com/support/kbdoc/de-de/000337528/dsa-2025-260-dell-secure-connect-gateway-security-update-for-multiple-third-party-component-vulnerabilities"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:03283-1 vom 2025-09-19",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-September/022596.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:03314-1 vom 2025-09-23",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-September/022615.html"
      }
    ],
    "source_lang": "en-US",
    "title": "Dell Secure Connect Gateway: Mehrere Schwachstellen erm\u00f6glichen nicht spezifizierten Angriff",
    "tracking": {
      "current_release_date": "2025-09-23T22:00:00.000+00:00",
      "generator": {
        "date": "2025-09-24T05:21:15.583+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.4.0"
        }
      },
      "id": "WID-SEC-W-2025-1439",
      "initial_release_date": "2025-06-30T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-06-30T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2025-09-21T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-09-23T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von SUSE aufgenommen"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c5.30.0.14",
                "product": {
                  "name": "Dell Secure Connect Gateway \u003c5.30.0.14",
                  "product_id": "T044974"
                }
              },
              {
                "category": "product_version",
                "name": "5.30.0.14",
                "product": {
                  "name": "Dell Secure Connect Gateway 5.30.0.14",
                  "product_id": "T044974-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:dell:secure_connect_gateway:5.30.0.14"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Secure Connect Gateway"
          }
        ],
        "category": "vendor",
        "name": "Dell"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-39028",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2022-39028"
    },
    {
      "cve": "CVE-2023-4016",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2023-4016"
    },
    {
      "cve": "CVE-2023-40403",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2023-40403"
    },
    {
      "cve": "CVE-2023-46316",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2023-46316"
    },
    {
      "cve": "CVE-2023-52426",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2023-52426"
    },
    {
      "cve": "CVE-2023-52831",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2023-52831"
    },
    {
      "cve": "CVE-2023-52924",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2023-52924"
    },
    {
      "cve": "CVE-2023-52925",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2023-52925"
    },
    {
      "cve": "CVE-2023-52926",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2023-52926"
    },
    {
      "cve": "CVE-2023-52927",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2023-52927"
    },
    {
      "cve": "CVE-2024-10041",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-10041"
    },
    {
      "cve": "CVE-2024-11168",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-11168"
    },
    {
      "cve": "CVE-2024-12243",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-12243"
    },
    {
      "cve": "CVE-2024-26634",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-26634"
    },
    {
      "cve": "CVE-2024-26708",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-26708"
    },
    {
      "cve": "CVE-2024-26810",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-26810"
    },
    {
      "cve": "CVE-2024-26873",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-26873"
    },
    {
      "cve": "CVE-2024-29018",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-29018"
    },
    {
      "cve": "CVE-2024-35826",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-35826"
    },
    {
      "cve": "CVE-2024-35910",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-35910"
    },
    {
      "cve": "CVE-2024-38606",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-38606"
    },
    {
      "cve": "CVE-2024-40635",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-40635"
    },
    {
      "cve": "CVE-2024-40980",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-40980"
    },
    {
      "cve": "CVE-2024-41005",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-41005"
    },
    {
      "cve": "CVE-2024-41055",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-41055"
    },
    {
      "cve": "CVE-2024-41077",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-41077"
    },
    {
      "cve": "CVE-2024-41149",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-41149"
    },
    {
      "cve": "CVE-2024-42307",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-42307"
    },
    {
      "cve": "CVE-2024-43790",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-43790"
    },
    {
      "cve": "CVE-2024-43802",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-43802"
    },
    {
      "cve": "CVE-2024-43820",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-43820"
    },
    {
      "cve": "CVE-2024-44974",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-44974"
    },
    {
      "cve": "CVE-2024-45009",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-45009"
    },
    {
      "cve": "CVE-2024-45010",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-45010"
    },
    {
      "cve": "CVE-2024-45306",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-45306"
    },
    {
      "cve": "CVE-2024-46736",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-46736"
    },
    {
      "cve": "CVE-2024-46782",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-46782"
    },
    {
      "cve": "CVE-2024-46796",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-46796"
    },
    {
      "cve": "CVE-2024-47220",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-47220"
    },
    {
      "cve": "CVE-2024-47408",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-47408"
    },
    {
      "cve": "CVE-2024-47794",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-47794"
    },
    {
      "cve": "CVE-2024-49571",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-49571"
    },
    {
      "cve": "CVE-2024-49761",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-49761"
    },
    {
      "cve": "CVE-2024-49924",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-49924"
    },
    {
      "cve": "CVE-2024-49940",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-49940"
    },
    {
      "cve": "CVE-2024-49994",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-49994"
    },
    {
      "cve": "CVE-2024-50029",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-50029"
    },
    {
      "cve": "CVE-2024-50036",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-50036"
    },
    {
      "cve": "CVE-2024-50056",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-50056"
    },
    {
      "cve": "CVE-2024-50085",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-50085"
    },
    {
      "cve": "CVE-2024-50126",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-50126"
    },
    {
      "cve": "CVE-2024-50140",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-50140"
    },
    {
      "cve": "CVE-2024-50152",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-50152"
    },
    {
      "cve": "CVE-2024-50185",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-50185"
    },
    {
      "cve": "CVE-2024-50290",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-50290"
    },
    {
      "cve": "CVE-2024-50294",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-50294"
    },
    {
      "cve": "CVE-2024-52559",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-52559"
    },
    {
      "cve": "CVE-2024-53057",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-53057"
    },
    {
      "cve": "CVE-2024-53063",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-53063"
    },
    {
      "cve": "CVE-2024-53123",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-53123"
    },
    {
      "cve": "CVE-2024-53140",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-53140"
    },
    {
      "cve": "CVE-2024-53147",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-53147"
    },
    {
      "cve": "CVE-2024-53163",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-53163"
    },
    {
      "cve": "CVE-2024-53176",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-53176"
    },
    {
      "cve": "CVE-2024-53177",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-53177"
    },
    {
      "cve": "CVE-2024-53178",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-53178"
    },
    {
      "cve": "CVE-2024-53226",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-53226"
    },
    {
      "cve": "CVE-2024-53680",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-53680"
    },
    {
      "cve": "CVE-2024-54683",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-54683"
    },
    {
      "cve": "CVE-2024-55549",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-55549"
    },
    {
      "cve": "CVE-2024-56171",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-56171"
    },
    {
      "cve": "CVE-2024-56568",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-56568"
    },
    {
      "cve": "CVE-2024-56579",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-56579"
    },
    {
      "cve": "CVE-2024-56633",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-56633"
    },
    {
      "cve": "CVE-2024-56638",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-56638"
    },
    {
      "cve": "CVE-2024-56640",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-56640"
    },
    {
      "cve": "CVE-2024-56647",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-56647"
    },
    {
      "cve": "CVE-2024-56702",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-56702"
    },
    {
      "cve": "CVE-2024-56703",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-56703"
    },
    {
      "cve": "CVE-2024-56718",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-56718"
    },
    {
      "cve": "CVE-2024-56719",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-56719"
    },
    {
      "cve": "CVE-2024-56720",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-56720"
    },
    {
      "cve": "CVE-2024-56751",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-56751"
    },
    {
      "cve": "CVE-2024-56758",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-56758"
    },
    {
      "cve": "CVE-2024-56770",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-56770"
    },
    {
      "cve": "CVE-2024-57807",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-57807"
    },
    {
      "cve": "CVE-2024-57834",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-57834"
    },
    {
      "cve": "CVE-2024-57889",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-57889"
    },
    {
      "cve": "CVE-2024-57900",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-57900"
    },
    {
      "cve": "CVE-2024-57947",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-57947"
    },
    {
      "cve": "CVE-2024-57948",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-57948"
    },
    {
      "cve": "CVE-2024-57973",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-57973"
    },
    {
      "cve": "CVE-2024-57974",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-57974"
    },
    {
      "cve": "CVE-2024-57978",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-57978"
    },
    {
      "cve": "CVE-2024-57979",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-57979"
    },
    {
      "cve": "CVE-2024-57980",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-57980"
    },
    {
      "cve": "CVE-2024-57981",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-57981"
    },
    {
      "cve": "CVE-2024-57986",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-57986"
    },
    {
      "cve": "CVE-2024-57990",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-57990"
    },
    {
      "cve": "CVE-2024-57993",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-57993"
    },
    {
      "cve": "CVE-2024-57994",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-57994"
    },
    {
      "cve": "CVE-2024-57996",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-57996"
    },
    {
      "cve": "CVE-2024-57997",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-57997"
    },
    {
      "cve": "CVE-2024-57999",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-57999"
    },
    {
      "cve": "CVE-2024-58002",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58002"
    },
    {
      "cve": "CVE-2024-58005",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58005"
    },
    {
      "cve": "CVE-2024-58006",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58006"
    },
    {
      "cve": "CVE-2024-58007",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58007"
    },
    {
      "cve": "CVE-2024-58009",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58009"
    },
    {
      "cve": "CVE-2024-58011",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58011"
    },
    {
      "cve": "CVE-2024-58012",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58012"
    },
    {
      "cve": "CVE-2024-58013",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58013"
    },
    {
      "cve": "CVE-2024-58014",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58014"
    },
    {
      "cve": "CVE-2024-58017",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58017"
    },
    {
      "cve": "CVE-2024-58019",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58019"
    },
    {
      "cve": "CVE-2024-58020",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58020"
    },
    {
      "cve": "CVE-2024-58034",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58034"
    },
    {
      "cve": "CVE-2024-58051",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58051"
    },
    {
      "cve": "CVE-2024-58052",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58052"
    },
    {
      "cve": "CVE-2024-58054",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58054"
    },
    {
      "cve": "CVE-2024-58055",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58055"
    },
    {
      "cve": "CVE-2024-58056",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58056"
    },
    {
      "cve": "CVE-2024-58057",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58057"
    },
    {
      "cve": "CVE-2024-58058",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58058"
    },
    {
      "cve": "CVE-2024-58061",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58061"
    },
    {
      "cve": "CVE-2024-58063",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58063"
    },
    {
      "cve": "CVE-2024-58069",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58069"
    },
    {
      "cve": "CVE-2024-58072",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58072"
    },
    {
      "cve": "CVE-2024-58076",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58076"
    },
    {
      "cve": "CVE-2024-58078",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58078"
    },
    {
      "cve": "CVE-2024-58079",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58079"
    },
    {
      "cve": "CVE-2024-58080",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58080"
    },
    {
      "cve": "CVE-2024-58083",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58083"
    },
    {
      "cve": "CVE-2024-58085",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58085"
    },
    {
      "cve": "CVE-2024-58086",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-58086"
    },
    {
      "cve": "CVE-2024-8176",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2024-8176"
    },
    {
      "cve": "CVE-2025-0395",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-0395"
    },
    {
      "cve": "CVE-2025-1094",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-1094"
    },
    {
      "cve": "CVE-2025-1215",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-1215"
    },
    {
      "cve": "CVE-2025-1795",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-1795"
    },
    {
      "cve": "CVE-2025-21631",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21631"
    },
    {
      "cve": "CVE-2025-21635",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21635"
    },
    {
      "cve": "CVE-2025-21636",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21636"
    },
    {
      "cve": "CVE-2025-21637",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21637"
    },
    {
      "cve": "CVE-2025-21638",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21638"
    },
    {
      "cve": "CVE-2025-21639",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21639"
    },
    {
      "cve": "CVE-2025-21640",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21640"
    },
    {
      "cve": "CVE-2025-21647",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21647"
    },
    {
      "cve": "CVE-2025-21659",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21659"
    },
    {
      "cve": "CVE-2025-21665",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21665"
    },
    {
      "cve": "CVE-2025-21667",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21667"
    },
    {
      "cve": "CVE-2025-21668",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21668"
    },
    {
      "cve": "CVE-2025-21671",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21671"
    },
    {
      "cve": "CVE-2025-21673",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21673"
    },
    {
      "cve": "CVE-2025-21680",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21680"
    },
    {
      "cve": "CVE-2025-21681",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21681"
    },
    {
      "cve": "CVE-2025-21684",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21684"
    },
    {
      "cve": "CVE-2025-21687",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21687"
    },
    {
      "cve": "CVE-2025-21688",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21688"
    },
    {
      "cve": "CVE-2025-21689",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21689"
    },
    {
      "cve": "CVE-2025-21690",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21690"
    },
    {
      "cve": "CVE-2025-21692",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21692"
    },
    {
      "cve": "CVE-2025-21693",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21693"
    },
    {
      "cve": "CVE-2025-21697",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21697"
    },
    {
      "cve": "CVE-2025-21699",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21699"
    },
    {
      "cve": "CVE-2025-21700",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21700"
    },
    {
      "cve": "CVE-2025-21701",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21701"
    },
    {
      "cve": "CVE-2025-21703",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21703"
    },
    {
      "cve": "CVE-2025-21704",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21704"
    },
    {
      "cve": "CVE-2025-21705",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21705"
    },
    {
      "cve": "CVE-2025-21706",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21706"
    },
    {
      "cve": "CVE-2025-21708",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21708"
    },
    {
      "cve": "CVE-2025-21711",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21711"
    },
    {
      "cve": "CVE-2025-21714",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21714"
    },
    {
      "cve": "CVE-2025-21715",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21715"
    },
    {
      "cve": "CVE-2025-21716",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21716"
    },
    {
      "cve": "CVE-2025-21718",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21718"
    },
    {
      "cve": "CVE-2025-21719",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21719"
    },
    {
      "cve": "CVE-2025-21723",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21723"
    },
    {
      "cve": "CVE-2025-21724",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21724"
    },
    {
      "cve": "CVE-2025-21725",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21725"
    },
    {
      "cve": "CVE-2025-21726",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21726"
    },
    {
      "cve": "CVE-2025-21727",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21727"
    },
    {
      "cve": "CVE-2025-21728",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21728"
    },
    {
      "cve": "CVE-2025-21731",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21731"
    },
    {
      "cve": "CVE-2025-21732",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21732"
    },
    {
      "cve": "CVE-2025-21733",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21733"
    },
    {
      "cve": "CVE-2025-21734",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21734"
    },
    {
      "cve": "CVE-2025-21735",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21735"
    },
    {
      "cve": "CVE-2025-21736",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21736"
    },
    {
      "cve": "CVE-2025-21738",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21738"
    },
    {
      "cve": "CVE-2025-21739",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21739"
    },
    {
      "cve": "CVE-2025-21741",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21741"
    },
    {
      "cve": "CVE-2025-21742",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21742"
    },
    {
      "cve": "CVE-2025-21743",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21743"
    },
    {
      "cve": "CVE-2025-21744",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21744"
    },
    {
      "cve": "CVE-2025-21745",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21745"
    },
    {
      "cve": "CVE-2025-21749",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21749"
    },
    {
      "cve": "CVE-2025-21750",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21750"
    },
    {
      "cve": "CVE-2025-21753",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21753"
    },
    {
      "cve": "CVE-2025-21754",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21754"
    },
    {
      "cve": "CVE-2025-21756",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21756"
    },
    {
      "cve": "CVE-2025-21759",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21759"
    },
    {
      "cve": "CVE-2025-21760",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21760"
    },
    {
      "cve": "CVE-2025-21761",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21761"
    },
    {
      "cve": "CVE-2025-21762",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21762"
    },
    {
      "cve": "CVE-2025-21763",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21763"
    },
    {
      "cve": "CVE-2025-21764",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21764"
    },
    {
      "cve": "CVE-2025-21765",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21765"
    },
    {
      "cve": "CVE-2025-21766",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21766"
    },
    {
      "cve": "CVE-2025-21767",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21767"
    },
    {
      "cve": "CVE-2025-21772",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21772"
    },
    {
      "cve": "CVE-2025-21773",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21773"
    },
    {
      "cve": "CVE-2025-21775",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21775"
    },
    {
      "cve": "CVE-2025-21776",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21776"
    },
    {
      "cve": "CVE-2025-21779",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21779"
    },
    {
      "cve": "CVE-2025-21780",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21780"
    },
    {
      "cve": "CVE-2025-21781",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21781"
    },
    {
      "cve": "CVE-2025-21782",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21782"
    },
    {
      "cve": "CVE-2025-21784",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21784"
    },
    {
      "cve": "CVE-2025-21785",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21785"
    },
    {
      "cve": "CVE-2025-21790",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21790"
    },
    {
      "cve": "CVE-2025-21791",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21791"
    },
    {
      "cve": "CVE-2025-21793",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21793"
    },
    {
      "cve": "CVE-2025-21794",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21794"
    },
    {
      "cve": "CVE-2025-21795",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21795"
    },
    {
      "cve": "CVE-2025-21796",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21796"
    },
    {
      "cve": "CVE-2025-21799",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21799"
    },
    {
      "cve": "CVE-2025-21802",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21802"
    },
    {
      "cve": "CVE-2025-21804",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21804"
    },
    {
      "cve": "CVE-2025-21810",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21810"
    },
    {
      "cve": "CVE-2025-21815",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21815"
    },
    {
      "cve": "CVE-2025-21819",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21819"
    },
    {
      "cve": "CVE-2025-21820",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21820"
    },
    {
      "cve": "CVE-2025-21821",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21821"
    },
    {
      "cve": "CVE-2025-21823",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21823"
    },
    {
      "cve": "CVE-2025-21825",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21825"
    },
    {
      "cve": "CVE-2025-21828",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21828"
    },
    {
      "cve": "CVE-2025-21829",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21829"
    },
    {
      "cve": "CVE-2025-21830",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21830"
    },
    {
      "cve": "CVE-2025-21831",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21831"
    },
    {
      "cve": "CVE-2025-21832",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21832"
    },
    {
      "cve": "CVE-2025-21835",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21835"
    },
    {
      "cve": "CVE-2025-21838",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21838"
    },
    {
      "cve": "CVE-2025-21844",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21844"
    },
    {
      "cve": "CVE-2025-21846",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21846"
    },
    {
      "cve": "CVE-2025-21847",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21847"
    },
    {
      "cve": "CVE-2025-21848",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21848"
    },
    {
      "cve": "CVE-2025-21850",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21850"
    },
    {
      "cve": "CVE-2025-21855",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21855"
    },
    {
      "cve": "CVE-2025-21856",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21856"
    },
    {
      "cve": "CVE-2025-21857",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21857"
    },
    {
      "cve": "CVE-2025-21858",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21858"
    },
    {
      "cve": "CVE-2025-21859",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21859"
    },
    {
      "cve": "CVE-2025-21861",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21861"
    },
    {
      "cve": "CVE-2025-21862",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21862"
    },
    {
      "cve": "CVE-2025-21864",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21864"
    },
    {
      "cve": "CVE-2025-21865",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21865"
    },
    {
      "cve": "CVE-2025-21866",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21866"
    },
    {
      "cve": "CVE-2025-21869",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21869"
    },
    {
      "cve": "CVE-2025-21870",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21870"
    },
    {
      "cve": "CVE-2025-21871",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21871"
    },
    {
      "cve": "CVE-2025-21876",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21876"
    },
    {
      "cve": "CVE-2025-21877",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21877"
    },
    {
      "cve": "CVE-2025-21878",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21878"
    },
    {
      "cve": "CVE-2025-21883",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21883"
    },
    {
      "cve": "CVE-2025-21885",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21885"
    },
    {
      "cve": "CVE-2025-21886",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21886"
    },
    {
      "cve": "CVE-2025-21888",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21888"
    },
    {
      "cve": "CVE-2025-21890",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21890"
    },
    {
      "cve": "CVE-2025-21891",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21891"
    },
    {
      "cve": "CVE-2025-21892",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-21892"
    },
    {
      "cve": "CVE-2025-22134",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-22134"
    },
    {
      "cve": "CVE-2025-22228",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-22228"
    },
    {
      "cve": "CVE-2025-22247",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-22247"
    },
    {
      "cve": "CVE-2025-22868",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-22868"
    },
    {
      "cve": "CVE-2025-22869",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-22869"
    },
    {
      "cve": "CVE-2025-24014",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-24014"
    },
    {
      "cve": "CVE-2025-24813",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-24813"
    },
    {
      "cve": "CVE-2025-24855",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-24855"
    },
    {
      "cve": "CVE-2025-24928",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-24928"
    },
    {
      "cve": "CVE-2025-2588",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-2588"
    },
    {
      "cve": "CVE-2025-26465",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-26465"
    },
    {
      "cve": "CVE-2025-26466",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-26466"
    },
    {
      "cve": "CVE-2025-26597",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-26597"
    },
    {
      "cve": "CVE-2025-27113",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-27113"
    },
    {
      "cve": "CVE-2025-27219",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-27219"
    },
    {
      "cve": "CVE-2025-27220",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-27220"
    },
    {
      "cve": "CVE-2025-27363",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-27363"
    },
    {
      "cve": "CVE-2025-29087",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-29087"
    },
    {
      "cve": "CVE-2025-29088",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-29088"
    },
    {
      "cve": "CVE-2025-31115",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-31115"
    },
    {
      "cve": "CVE-2025-31335",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-31335"
    },
    {
      "cve": "CVE-2025-31650",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-31650"
    },
    {
      "cve": "CVE-2025-31651",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-31651"
    },
    {
      "cve": "CVE-2025-32414",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-32414"
    },
    {
      "cve": "CVE-2025-32415",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-32415"
    },
    {
      "cve": "CVE-2025-32728",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-32728"
    },
    {
      "cve": "CVE-2025-3360",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-3360"
    },
    {
      "cve": "CVE-2025-4207",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-4207"
    },
    {
      "cve": "CVE-2025-4382",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-4382"
    },
    {
      "cve": "CVE-2025-47268",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-47268"
    },
    {
      "cve": "CVE-2025-4802",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-4802"
    },
    {
      "cve": "CVE-2025-48734",
      "product_status": {
        "known_affected": [
          "T044974",
          "T002207"
        ]
      },
      "release_date": "2025-06-30T22:00:00.000+00:00",
      "title": "CVE-2025-48734"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "FreeFlow-Druckserver ist eine Druckserveranwendung f\u00fcr Xerox-Produktionsdrucker, die Flexibilit\u00e4t, umfangreiche Workflow-Optionen und eine Farbverwaltung bietet.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um einen nicht n\u00e4her spezifizierten Angriff durchzuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-1850 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1850.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-1850 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1850"
      },
      {
        "category": "external",
        "summary": "Xerox Security Bulletin XRX25-014 vom 2025-08-14",
        "url": "https://securitydocs.business.xerox.com/wp-content/uploads/2025/08/Xerox-Security-Bulletin-XRX25-014-for-Xerox-FreeFlow-Print-Server-v7.pdf"
      },
      {
        "category": "external",
        "summary": "Xerox Security Bulletin XRX25-015 vom 2025-08-14",
        "url": "https://securitydocs.business.xerox.com/wp-content/uploads/2025/08/Xerox-Security-Bulletin-XRX25-015-Xerox-FreeFlow-Print-Server-v2_Windows-10.pdf"
      },
      {
        "category": "external",
        "summary": "XEROX Security Advisory XRX25-017 vom 2025-10-07",
        "url": "https://security.business.xerox.com/wp-content/uploads/2025/10/Xerox-Security-Bulletin-XRX25-017-for-Xerox-FreeFlow-Print-Server-v9.pdf"
      },
      {
        "category": "external",
        "summary": "XEROX Security Advisory XRX25-016 vom 2025-10-07",
        "url": "https://securitydocs.business.xerox.com/wp-content/uploads/2025/10/Xerox-Security-Bulletin-XRX25-016-for-Xerox-FreeFlow-Print-Server-v9.pdf"
      },
      {
        "category": "external",
        "summary": "XEROX Security Advisory XRX25-018 vom 2025-11-18",
        "url": "https://security.business.xerox.com/wp-content/uploads/2025/11/Xerox-Security-Bulletin-XRX25-018-Xerox-FreeFlow-Print-Server-v7.pdf"
      }
    ],
    "source_lang": "en-US",
    "title": "Xerox FreeFlow Print Server: Mehrere Schwachstellen erm\u00f6glichen nicht spezifizierten Angriff",
    "tracking": {
      "current_release_date": "2025-11-17T23:00:00.000+00:00",
      "generator": {
        "date": "2025-11-18T08:12:52.112+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2025-1850",
      "initial_release_date": "2025-08-14T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-08-14T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2025-10-06T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von XEROX aufgenommen"
        },
        {
          "date": "2025-11-17T23:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von XEROX aufgenommen"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "9",
                "product": {
                  "name": "Xerox FreeFlow Print Server 9",
                  "product_id": "T002977",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:xerox:freeflow_print_server:9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "v7",
                "product": {
                  "name": "Xerox FreeFlow Print Server v7",
                  "product_id": "T035098",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:xerox:freeflow_print_server:v7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "v7",
                "product": {
                  "name": "Xerox FreeFlow Print Server v7",
                  "product_id": "T046288",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:xerox:freeflow_print_server:v7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "v2",
                "product": {
                  "name": "Xerox FreeFlow Print Server v2",
                  "product_id": "T046289",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:xerox:freeflow_print_server:v2"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "FreeFlow Print Server"
          }
        ],
        "category": "vendor",
        "name": "Xerox"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-12718",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2024-12718"
    },
    {
      "cve": "CVE-2024-12797",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2024-12797"
    },
    {
      "cve": "CVE-2024-13176",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2024-13176"
    },
    {
      "cve": "CVE-2024-36350",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2024-36350"
    },
    {
      "cve": "CVE-2024-36357",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2024-36357"
    },
    {
      "cve": "CVE-2024-37894",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2024-37894"
    },
    {
      "cve": "CVE-2024-42516",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2024-42516"
    },
    {
      "cve": "CVE-2024-43204",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2024-43204"
    },
    {
      "cve": "CVE-2024-43394",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2024-43394"
    },
    {
      "cve": "CVE-2024-45802",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2024-45802"
    },
    {
      "cve": "CVE-2024-47252",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2024-47252"
    },
    {
      "cve": "CVE-2024-48615",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2024-48615"
    },
    {
      "cve": "CVE-2024-56406",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2024-56406"
    },
    {
      "cve": "CVE-2024-8176",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2024-8176"
    },
    {
      "cve": "CVE-2025-1632",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-1632"
    },
    {
      "cve": "CVE-2025-1795",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-1795"
    },
    {
      "cve": "CVE-2025-21574",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-21574"
    },
    {
      "cve": "CVE-2025-21575",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-21575"
    },
    {
      "cve": "CVE-2025-21577",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-21577"
    },
    {
      "cve": "CVE-2025-21579",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-21579"
    },
    {
      "cve": "CVE-2025-21580",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-21580"
    },
    {
      "cve": "CVE-2025-21581",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-21581"
    },
    {
      "cve": "CVE-2025-21583",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-21583"
    },
    {
      "cve": "CVE-2025-21584",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-21584"
    },
    {
      "cve": "CVE-2025-21585",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-21585"
    },
    {
      "cve": "CVE-2025-21588",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-21588"
    },
    {
      "cve": "CVE-2025-23048",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-23048"
    },
    {
      "cve": "CVE-2025-25724",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-25724"
    },
    {
      "cve": "CVE-2025-2817",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-2817"
    },
    {
      "cve": "CVE-2025-29915",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-29915"
    },
    {
      "cve": "CVE-2025-29916",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-29916"
    },
    {
      "cve": "CVE-2025-29917",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-29917"
    },
    {
      "cve": "CVE-2025-29918",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-29918"
    },
    {
      "cve": "CVE-2025-30681",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-30681"
    },
    {
      "cve": "CVE-2025-30682",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-30682"
    },
    {
      "cve": "CVE-2025-30683",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-30683"
    },
    {
      "cve": "CVE-2025-30684",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-30684"
    },
    {
      "cve": "CVE-2025-30685",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-30685"
    },
    {
      "cve": "CVE-2025-30687",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-30687"
    },
    {
      "cve": "CVE-2025-30688",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-30688"
    },
    {
      "cve": "CVE-2025-30689",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-30689"
    },
    {
      "cve": "CVE-2025-30693",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-30693"
    },
    {
      "cve": "CVE-2025-30695",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-30695"
    },
    {
      "cve": "CVE-2025-30696",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-30696"
    },
    {
      "cve": "CVE-2025-30699",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-30699"
    },
    {
      "cve": "CVE-2025-30703",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-30703"
    },
    {
      "cve": "CVE-2025-30704",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-30704"
    },
    {
      "cve": "CVE-2025-30705",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-30705"
    },
    {
      "cve": "CVE-2025-30715",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-30715"
    },
    {
      "cve": "CVE-2025-30721",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-30721"
    },
    {
      "cve": "CVE-2025-30722",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-30722"
    },
    {
      "cve": "CVE-2025-30749",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-30749"
    },
    {
      "cve": "CVE-2025-30754",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-30754"
    },
    {
      "cve": "CVE-2025-30761",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-30761"
    },
    {
      "cve": "CVE-2025-31498",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-31498"
    },
    {
      "cve": "CVE-2025-31650",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-31650"
    },
    {
      "cve": "CVE-2025-31651",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-31651"
    },
    {
      "cve": "CVE-2025-3875",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-3875"
    },
    {
      "cve": "CVE-2025-3877",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-3877"
    },
    {
      "cve": "CVE-2025-3909",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-3909"
    },
    {
      "cve": "CVE-2025-3932",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-3932"
    },
    {
      "cve": "CVE-2025-4082",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-4082"
    },
    {
      "cve": "CVE-2025-4083",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-4083"
    },
    {
      "cve": "CVE-2025-4084",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-4084"
    },
    {
      "cve": "CVE-2025-4085",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-4085"
    },
    {
      "cve": "CVE-2025-4086",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-4086"
    },
    {
      "cve": "CVE-2025-4087",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-4087"
    },
    {
      "cve": "CVE-2025-4088",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-4088"
    },
    {
      "cve": "CVE-2025-4089",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-4089"
    },
    {
      "cve": "CVE-2025-4090",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-4090"
    },
    {
      "cve": "CVE-2025-40909",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-40909"
    },
    {
      "cve": "CVE-2025-4091",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-4091"
    },
    {
      "cve": "CVE-2025-4092",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-4092"
    },
    {
      "cve": "CVE-2025-4093",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-4093"
    },
    {
      "cve": "CVE-2025-4138",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-4138"
    },
    {
      "cve": "CVE-2025-4330",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-4330"
    },
    {
      "cve": "CVE-2025-4516",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-4516"
    },
    {
      "cve": "CVE-2025-4517",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-4517"
    },
    {
      "cve": "CVE-2025-4575",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-4575"
    },
    {
      "cve": "CVE-2025-46701",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-46701"
    },
    {
      "cve": "CVE-2025-46802",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-46802"
    },
    {
      "cve": "CVE-2025-46804",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-46804"
    },
    {
      "cve": "CVE-2025-46805",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-46805"
    },
    {
      "cve": "CVE-2025-47159",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-47159"
    },
    {
      "cve": "CVE-2025-47971",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-47971"
    },
    {
      "cve": "CVE-2025-47972",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-47972"
    },
    {
      "cve": "CVE-2025-47973",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-47973"
    },
    {
      "cve": "CVE-2025-47975",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-47975"
    },
    {
      "cve": "CVE-2025-47976",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-47976"
    },
    {
      "cve": "CVE-2025-47980",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-47980"
    },
    {
      "cve": "CVE-2025-47981",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-47981"
    },
    {
      "cve": "CVE-2025-47982",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-47982"
    },
    {
      "cve": "CVE-2025-47984",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-47984"
    },
    {
      "cve": "CVE-2025-47985",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-47985"
    },
    {
      "cve": "CVE-2025-47986",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-47986"
    },
    {
      "cve": "CVE-2025-47987",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-47987"
    },
    {
      "cve": "CVE-2025-47991",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-47991"
    },
    {
      "cve": "CVE-2025-47996",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-47996"
    },
    {
      "cve": "CVE-2025-47999",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-47999"
    },
    {
      "cve": "CVE-2025-48000",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-48000"
    },
    {
      "cve": "CVE-2025-48001",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-48001"
    },
    {
      "cve": "CVE-2025-48799",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-48799"
    },
    {
      "cve": "CVE-2025-48800",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-48800"
    },
    {
      "cve": "CVE-2025-48803",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-48803"
    },
    {
      "cve": "CVE-2025-48804",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-48804"
    },
    {
      "cve": "CVE-2025-48805",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-48805"
    },
    {
      "cve": "CVE-2025-48806",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-48806"
    },
    {
      "cve": "CVE-2025-48808",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-48808"
    },
    {
      "cve": "CVE-2025-48811",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-48811"
    },
    {
      "cve": "CVE-2025-48814",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-48814"
    },
    {
      "cve": "CVE-2025-48815",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-48815"
    },
    {
      "cve": "CVE-2025-48816",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-48816"
    },
    {
      "cve": "CVE-2025-48817",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-48817"
    },
    {
      "cve": "CVE-2025-48818",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-48818"
    },
    {
      "cve": "CVE-2025-48819",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-48819"
    },
    {
      "cve": "CVE-2025-48820",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-48820"
    },
    {
      "cve": "CVE-2025-48821",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-48821"
    },
    {
      "cve": "CVE-2025-48822",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-48822"
    },
    {
      "cve": "CVE-2025-48823",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-48823"
    },
    {
      "cve": "CVE-2025-4918",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-4918"
    },
    {
      "cve": "CVE-2025-4919",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-4919"
    },
    {
      "cve": "CVE-2025-49630",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49630"
    },
    {
      "cve": "CVE-2025-49658",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49658"
    },
    {
      "cve": "CVE-2025-49659",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49659"
    },
    {
      "cve": "CVE-2025-49660",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49660"
    },
    {
      "cve": "CVE-2025-49661",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49661"
    },
    {
      "cve": "CVE-2025-49664",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49664"
    },
    {
      "cve": "CVE-2025-49665",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49665"
    },
    {
      "cve": "CVE-2025-49667",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49667"
    },
    {
      "cve": "CVE-2025-49675",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49675"
    },
    {
      "cve": "CVE-2025-49678",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49678"
    },
    {
      "cve": "CVE-2025-49679",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49679"
    },
    {
      "cve": "CVE-2025-49680",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49680"
    },
    {
      "cve": "CVE-2025-49683",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49683"
    },
    {
      "cve": "CVE-2025-49684",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49684"
    },
    {
      "cve": "CVE-2025-49686",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49686"
    },
    {
      "cve": "CVE-2025-49687",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49687"
    },
    {
      "cve": "CVE-2025-49689",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49689"
    },
    {
      "cve": "CVE-2025-49691",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49691"
    },
    {
      "cve": "CVE-2025-49709",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49709"
    },
    {
      "cve": "CVE-2025-49710",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49710"
    },
    {
      "cve": "CVE-2025-49721",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49721"
    },
    {
      "cve": "CVE-2025-49722",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49722"
    },
    {
      "cve": "CVE-2025-49725",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49725"
    },
    {
      "cve": "CVE-2025-49726",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49726"
    },
    {
      "cve": "CVE-2025-49727",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49727"
    },
    {
      "cve": "CVE-2025-49730",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49730"
    },
    {
      "cve": "CVE-2025-49732",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49732"
    },
    {
      "cve": "CVE-2025-49740",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49740"
    },
    {
      "cve": "CVE-2025-49742",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49742"
    },
    {
      "cve": "CVE-2025-49744",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49744"
    },
    {
      "cve": "CVE-2025-49760",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49760"
    },
    {
      "cve": "CVE-2025-49812",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-49812"
    },
    {
      "cve": "CVE-2025-50059",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-50059"
    },
    {
      "cve": "CVE-2025-50106",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-50106"
    },
    {
      "cve": "CVE-2025-5263",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-5263"
    },
    {
      "cve": "CVE-2025-5264",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-5264"
    },
    {
      "cve": "CVE-2025-5265",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-5265"
    },
    {
      "cve": "CVE-2025-5266",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-5266"
    },
    {
      "cve": "CVE-2025-5267",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-5267"
    },
    {
      "cve": "CVE-2025-5268",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-5268"
    },
    {
      "cve": "CVE-2025-5269",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-5269"
    },
    {
      "cve": "CVE-2025-5270",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-5270"
    },
    {
      "cve": "CVE-2025-5271",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-5271"
    },
    {
      "cve": "CVE-2025-5272",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-5272"
    },
    {
      "cve": "CVE-2025-5283",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-5283"
    },
    {
      "cve": "CVE-2025-53020",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-53020"
    },
    {
      "cve": "CVE-2025-5601",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-5601"
    },
    {
      "cve": "CVE-2025-6424",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-6424"
    },
    {
      "cve": "CVE-2025-6425",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-6425"
    },
    {
      "cve": "CVE-2025-6426",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-6426"
    },
    {
      "cve": "CVE-2025-6427",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-6427"
    },
    {
      "cve": "CVE-2025-6428",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-6428"
    },
    {
      "cve": "CVE-2025-6429",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-6429"
    },
    {
      "cve": "CVE-2025-6430",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-6430"
    },
    {
      "cve": "CVE-2025-6431",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-6431"
    },
    {
      "cve": "CVE-2025-6432",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-6432"
    },
    {
      "cve": "CVE-2025-6433",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-6433"
    },
    {
      "cve": "CVE-2025-6434",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-6434"
    },
    {
      "cve": "CVE-2025-6435",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-6435"
    },
    {
      "cve": "CVE-2025-6436",
      "product_status": {
        "known_affected": [
          "T035098",
          "T002977",
          "T046288",
          "T046289"
        ]
      },
      "release_date": "2025-08-14T22:00:00.000+00:00",
      "title": "CVE-2025-6436"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "IBM QRadar Security Information and Event Management (SIEM) bietet Unterst\u00fctzung bei der Erkennung und Priorisierung von Sicherheitsbedrohungen im Unternehmen.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren, um beliebige Befehle auszuf\u00fchren und um nicht n\u00e4her spezifizierte Auswirkungen zu verursachen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-1365 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1365.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-1365 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1365"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7237317 vom 2025-06-19",
        "url": "https://www.ibm.com/support/pages/node/7237317"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7237316 vom 2025-06-19",
        "url": "https://www.ibm.com/support/pages/node/7237316"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7239757 vom 2025-07-15",
        "url": "https://www.ibm.com/support/pages/node/7239757"
      }
    ],
    "source_lang": "en-US",
    "title": "IBM QRadar SIEM: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2025-07-15T22:00:00.000+00:00",
      "generator": {
        "date": "2025-07-16T07:32:15.040+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.4.0"
        }
      },
      "id": "WID-SEC-W-2025-1365",
      "initial_release_date": "2025-06-19T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-06-19T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2025-07-15T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von IBM aufgenommen"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "IBM QRadar SIEM",
                "product": {
                  "name": "IBM QRadar SIEM",
                  "product_id": "T021415",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:qradar_siem:-"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c7.5.0 UP12 IF02",
                "product": {
                  "name": "IBM QRadar SIEM \u003c7.5.0 UP12 IF02",
                  "product_id": "T044767"
                }
              },
              {
                "category": "product_version",
                "name": "7.5.0 UP12 IF02",
                "product": {
                  "name": "IBM QRadar SIEM 7.5.0 UP12 IF02",
                  "product_id": "T044767-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:qradar_siem:7.5.0:up12_if02"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "QRadar SIEM"
          }
        ],
        "category": "vendor",
        "name": "IBM"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-9840",
      "product_status": {
        "known_affected": [
          "T044767",
          "T021415"
        ]
      },
      "release_date": "2025-06-19T22:00:00.000+00:00",
      "title": "CVE-2016-9840"
    },
    {
      "cve": "CVE-2020-11971",
      "product_status": {
        "known_affected": [
          "T044767",
          "T021415"
        ]
      },
      "release_date": "2025-06-19T22:00:00.000+00:00",
      "title": "CVE-2020-11971"
    },
    {
      "cve": "CVE-2020-13790",
      "product_status": {
        "known_affected": [
          "T044767",
          "T021415"
        ]
      },
      "release_date": "2025-06-19T22:00:00.000+00:00",
      "title": "CVE-2020-13790"
    },
    {
      "cve": "CVE-2022-49011",
      "product_status": {
        "known_affected": [
          "T044767",
          "T021415"
        ]
      },
      "release_date": "2025-06-19T22:00:00.000+00:00",
      "title": "CVE-2022-49011"
    },
    {
      "cve": "CVE-2023-0286",
      "product_status": {
        "known_affected": [
          "T044767",
          "T021415"
        ]
      },
      "release_date": "2025-06-19T22:00:00.000+00:00",
      "title": "CVE-2023-0286"
    },
    {
      "cve": "CVE-2024-12087",
      "product_status": {
        "known_affected": [
          "T044767",
          "T021415"
        ]
      },
      "release_date": "2025-06-19T22:00:00.000+00:00",
      "title": "CVE-2024-12087"
    },
    {
      "cve": "CVE-2024-12088",
      "product_status": {
        "known_affected": [
          "T044767",
          "T021415"
        ]
      },
      "release_date": "2025-06-19T22:00:00.000+00:00",
      "title": "CVE-2024-12088"
    },
    {
      "cve": "CVE-2024-12747",
      "product_status": {
        "known_affected": [
          "T044767",
          "T021415"
        ]
      },
      "release_date": "2025-06-19T22:00:00.000+00:00",
      "title": "CVE-2024-12747"
    },
    {
      "cve": "CVE-2024-40906",
      "product_status": {
        "known_affected": [
          "T044767",
          "T021415"
        ]
      },
      "release_date": "2025-06-19T22:00:00.000+00:00",
      "title": "CVE-2024-40906"
    },
    {
      "cve": "CVE-2024-43842",
      "product_status": {
        "known_affected": [
          "T044767",
          "T021415"
        ]
      },
      "release_date": "2025-06-19T22:00:00.000+00:00",
      "title": "CVE-2024-43842"
    },
    {
      "cve": "CVE-2024-53141",
      "product_status": {
        "known_affected": [
          "T044767",
          "T021415"
        ]
      },
      "release_date": "2025-06-19T22:00:00.000+00:00",
      "title": "CVE-2024-53141"
    },
    {
      "cve": "CVE-2024-53150",
      "product_status": {
        "known_affected": [
          "T044767",
          "T021415"
        ]
      },
      "release_date": "2025-06-19T22:00:00.000+00:00",
      "title": "CVE-2024-53150"
    },
    {
      "cve": "CVE-2024-53241",
      "product_status": {
        "known_affected": [
          "T044767",
          "T021415"
        ]
      },
      "release_date": "2025-06-19T22:00:00.000+00:00",
      "title": "CVE-2024-53241"
    },
    {
      "cve": "CVE-2024-8176",
      "product_status": {
        "known_affected": [
          "T044767",
          "T021415"
        ]
      },
      "release_date": "2025-06-19T22:00:00.000+00:00",
      "title": "CVE-2024-8176"
    },
    {
      "cve": "CVE-2025-0395",
      "product_status": {
        "known_affected": [
          "T044767",
          "T021415"
        ]
      },
      "release_date": "2025-06-19T22:00:00.000+00:00",
      "title": "CVE-2025-0395"
    },
    {
      "cve": "CVE-2025-22869",
      "product_status": {
        "known_affected": [
          "T044767",
          "T021415"
        ]
      },
      "release_date": "2025-06-19T22:00:00.000+00:00",
      "title": "CVE-2025-22869"
    },
    {
      "cve": "CVE-2025-24528",
      "product_status": {
        "known_affected": [
          "T044767",
          "T021415"
        ]
      },
      "release_date": "2025-06-19T22:00:00.000+00:00",
      "title": "CVE-2025-24528"
    },
    {
      "cve": "CVE-2025-31650",
      "product_status": {
        "known_affected": [
          "T044767",
          "T021415"
        ]
      },
      "release_date": "2025-06-19T22:00:00.000+00:00",
      "title": "CVE-2025-31650"
    },
    {
      "cve": "CVE-2025-31651",
      "product_status": {
        "known_affected": [
          "T044767",
          "T021415"
        ]
      },
      "release_date": "2025-06-19T22:00:00.000+00:00",
      "title": "CVE-2025-31651"
    },
    {
      "cve": "CVE-2025-46701",
      "product_status": {
        "known_affected": [
          "T044767",
          "T021415"
        ]
      },
      "release_date": "2025-06-19T22:00:00.000+00:00",
      "title": "CVE-2025-46701"
    },
    {
      "cve": "CVE-2025-36050",
      "product_status": {
        "known_affected": [
          "T044767",
          "T021415"
        ]
      },
      "release_date": "2025-06-19T22:00:00.000+00:00",
      "title": "CVE-2025-36050"
    },
    {
      "cve": "CVE-2025-33121",
      "product_status": {
        "known_affected": [
          "T044767",
          "T021415"
        ]
      },
      "release_date": "2025-06-19T22:00:00.000+00:00",
      "title": "CVE-2025-33121"
    },
    {
      "cve": "CVE-2025-33117",
      "product_status": {
        "known_affected": [
          "T044767",
          "T021415"
        ]
      },
      "release_date": "2025-06-19T22:00:00.000+00:00",
      "title": "CVE-2025-33117"
    }
  ]
}