Vulnerability-Lookup

RHSA-2026:24866

Vulnerability from csaf_redhat - Published: 2026-06-09 17:09 - Updated: 2026-09-25 15:58

Summary

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Container Release Update

Severity

Critical

Notes

Topic: An update is now available for Red Hat Ansible Automation Platform 2.6

Details: Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language. For details about this release, refer to the release notes listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2025-62718

A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.

7.0 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L

CWE-1289 - Improper Validation of Unsafe Equivalence in Input

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:5a18e28d9adc93f7429ee2aeddfed16beabb8ea777b568576f35c85579902a81_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:6e5abb4c408bdb38987e13f09d6a1699de40ef39243ac91a5731c48b377169b0_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:87b7771c1db5e931baf83d00528dc7b65e90c8828032741a5a1c37cbc4a300b8_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:94b9b25cba1fd560c6572ebde1cce9ea9c959ce31d2f02561e68ff7db580bdcf_s390x	—	Vendor Fix fix Workaround

Known not affected 110 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:3362761d6a5d99330d303adc87e1181369243147d56347362bfba62cc8047081_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:862cb4601db2eb288b72e993ed1c4b6bbb2e4dd37050d549ba86e6eafc3f1045_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:906f8d05d464820d7f46e9e3e437700adb70397eab300f2c0a2f281ee5322dfd_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:a9ec99ae45084783f79da5a8e41f42763b006489c84ffae0758ce12cea05948d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:9e37aeb2f8f5d89367c4c1415abbd66464aae126eda811f832a87c7fa1e914b0_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:a35e350ec5c0172601f25ac89fcbc48ff8c83ad2c5fdf798de917d9b046c9cc7_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:d833ed5b6de160d7e0cbf35cd5d7f93bfaa74acb2b12846ccc1eef41ef48074d_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:e81951b19451ffa56f4d44225c241229db250e2b87b0cf546d57506ad0911f41_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:443ed5ee0076c027a2af55183ce364225dce498e42fccdb259efd69ff412675f_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:b5424fd9f704ddf4ab272fc1629a64d3a658b9aa40c4dcfac58dd6ca51b48220_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:ccbd0249255d0fc1434a1c6fde96fbd6dc1059becefaa475d9cddd61dff0a970_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:fb3278021a45367ac357ed32872eb4e671844faad6b9eb9b08db0e476849bae4_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:17ed60234239a1b0b5081ae28b2a2a154ed79eaac34c0cf502c45bef6bb90c0a_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:754ad996d3fb66fffb7bfe0ee9289c9191b3ccecebd509ea99b3906f6f9e2208_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:a11554edb0f50083024b36f2dc13c5b6a60211a1ecaad30a78409a433512a705_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:f01ed355b061010f9584a77daad927f1ccca5097cc17e16823fdd2818508578b_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:77ab5de9e627656bd9668724e2f59a37510a4905801edd183ecf380dcd9fe585_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:b37af6bef902e0eb955654296154355ed9941569929d2db7a22a595b0fa0162c_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:c076cf5c0e56918bb49e8c353bc48265a9d88834934563259308cad15eb304e2_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:dfc798d88444141412d07492a1f426f083c6b7e3499db2f78abfeba0123c5821_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:08bef41a15e546deccf883d64ce525df7efd0511a5a52872f1e7486d3a4e0e75_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:1f03bd9054901f83e354a52bde14ad3e5ad8e556db128e22cf7ebe7a46ac7c44_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:76084c25d8de65c919ec760b8ddb9ae338da5cebe4b9ea03294c7b6466e0c3b6_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:c135bdbb6697bdfd4d711d71f70d915839c08057ba7aab7bf7117643f1f47bf8_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:01780af012f7fad2b3f8975e9a77a8e9d85913ac6869c60d94b9f7b0e71c4e41_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:12726676bf7f888bf49734aab1616046d8c3cef36cda5016de02cb09e36b51a5_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:6b5eac6cb840fc63462c7ba90f9119425b47abe39ce3a035c58aa1c24d20274e_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:72e638615fa4eccc23719eb2cc6892531508c41a2b3b80efcdcd34360d99b6e9_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:5cd20de178fd45b1775781a93e4e62bd61023175d5faf624ac8d8713fd7f8fe2_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:6be2a2d2a07c738c7ff04fbf4570a45d6c9a78c6d340e10e8a144461867b45d3_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:af8ef0d4d9e733370babbe0f6647d20d8f5fdc01349738a173803a7782bab2c1_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:e77be358fa816a3bc3dcb40fae651d317da03e6834049dc0c9b2f868a27180e0_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:653cdc00e8cd62c3606c5680f550c45b72294ff711dd4fa84ed03180d836cfad_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:65813a1c96deb46ed24ae6ec32a41f381a58facacbb5ab953914298b80d27d73_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:baf0e909c2a0f3b516e2b4f7417f1557a73f7139480628b9efa487b419784d2e_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:d4e8c0cbc0691b961a28b670e61fb52941d99804f83a0e3f82c610e800369c08_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:21cd299b7438e018c4f3c9a0092df03f0c042c9cb40bf326056e02740fd2ccab_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:243badf894b3ecf3ae0e42447e8d4415644d865f01b292416819c0e4d969cec8_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:95d30d40d9cd98affa936cecb673fa0993721f25501fb975d7e7c126ecfa141c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:dea1282e383022fae2548eab7fcb110afc78276336311729711f200279cc636f_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:08ce19063089c5e2432394a730287e17d9aa680aad9c228ca8163a5c86de5283_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:19166f3323bf6cb6d86bc917960a452002e9d10e796228c564b400e7849fe164_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:dac798d7cd52804aa0fed81b8743d51a7f35a34a920067a44270ed866164688d_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:eea7078b27cbde48374b22f3c234d7b9cf40119a1e9d226ade575181eff11ec5_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:12040aec052e056cc93acb8d99b725c6ff518445b69e86971f60fe1460d3b80d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:3f7645c26cacd70cddf3ebf45410ab4e2fd7f34be1e0abf022361a1c486a8e0a_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:b16272547b35c5059b4954c2e75ef1aaae29f92576cfbf0a4fc6b870558ce085_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:ff4fe0dcbba51685739002ed8703822ae55b9fab6ce0f5bc5e1600b5ad53b474_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:0e76b0c1624bd3f7afc103028de41fad5df327f662eb92362243c933d53d7a5e_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:480e49c6ab2805182121f2204023cc35974b803ecbe8f5f6a1ce8b5c9940df9d_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:8a1cfb834027a80ed63f6baa04138c297b207129cbe2badb5288021ab2d01f9e_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:a546ff44cde478da177dccf2d3cc93667422297e6bf40923955f3ca9801e6319_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:007212c6697175cde671e7150b58b05b31f02641451998023ca867e868a5b393_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:4450f35880b8a42c3dfec603143c0ded87b94b68472efd074eaf850e09cb1949_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:648591fde25f36d752c6f7ba06224fb939f2f227273a13a5e14371147ac5a7f5_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:e3711929d6bc96143d385d0d95d0b7cd41ff2271b6be677ac59681c61e91e1a7_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:085f4b5bef40a152a53dab4032b8f86d00f19186e0e8cc44c43654172c7247e0_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:503dfe60277d2a1b378eec07e179928add2af1d968614f46756a47df11a58579_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:78cf27a0aa87e23ead38510b5f76b56053fd2fb19dd8dffef714106b035e66cc_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:baf3be5dd66c26b9295da4d9202e93fa1c718b5ac0700bb450acccbd57367082_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:7a4a38fb52698e0edb0426bdd5bd8eda86b08758548c22091301a6be10579fa3_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:9b92e13859d120c01c8776e7dbe9e56e9569351cdc7ccc53ac34f3e3034feae1_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:b915260ad68010ba87a875e45bf2a80f92da715b73a1f7277d4f1a40f348428c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:f07c731d554f88d8531de6981846e05b817bea2e3f254a0c7dc6a21ba51f8838_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:12e4d0feaa59c71d5e846dce888e17467a6922aa08a9c2971ae15a47604c8cc2_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:4e335af8d2fc8b8df96c1338a17fe2e32c51bd16229008ec66d40cc24187a8c6_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:878088c9089f2d9b9eda19edb88c6f11b65316dcdd0291049e357d7d6f5ba9b2_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:fc3ff82f0cf98d1e8031a0a53c4fc06d4783b668b8d22229fd0a13d74b3e3d84_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:0750bf5476cab8d10288afced3704b87d988e37575ee88cb9c5aeb3a117bbeaf_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:1626a744d4621b09beff3171eefef651b426172ebac25d5a5f9c4ccc4d5aae42_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:17b5bc347764f23b1e17bd990e0050a2934315211fa11642b1a206027a356a86_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:e7b4f3a3e5734de252d6214ec345479704c4fe7dcf3ed7bebe5a2a5166f00489_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:264726e334c529ad8a6e8f0fb1591cff3360fc57b9bfec4d937852e8c636547a_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:4f334f34591be73a659548d4f2f3f59bff8ba7e2c76863d9eb81ed67c3c78e75_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:c14363d97da2591ea16578d2825ac7841102bcd205f0d014bc04697257b9c907_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:e66798c501870aded1197e33098b181135d7465275f7b18969ac73846db2ae6b_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:7cf2d4764244f9d24861c597939224dfad6935823bb5271279e9c1711390f782_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:c9c997790102efacb3e3001fc833cbb9c0e5d43aa506b499158a537af1cb7f84_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:d2a1bfaf4fe65ac2807409febecca76a1dfea376455c5c92cc9ebd6e43b3d6d9_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:e8edf62d6739397fa96c44c502c7ee64e0fe884a526d8d2b37ce39f04e3d8f39_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:295002a40f4e50912d15e5e101306f2281be8dbf6440c4573d56098ad35745d5_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:93b09e8400609e2507c4909d446e00f709d3c1e1c2f5f18f0e9d83f215c5e7b6_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:b332d45519f1d5ea72c3e0ad5cfa2c182a8f9fbba682bd3a86734999e33519e4_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:bb17450a5a8ff1ff4b364523e0b19cd2913f560f10e0214a0405ee18d2a36fd1_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:533bd486273743daf1f023b3d77f0a151fe1e5c6f63f806588964a5bd1b6f1d6_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:6939f0ea8c418da6173f39771e7936f69cd3a244587d7c3cc736bf261ba39a34_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:cfe1245a29cc96306898ebde112a7cebce0865e5a977f8959e786022235a78a0_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:d7199aa13e57c289cfb7c163dcb6d08a01a5b54f750c8d792d302cf104126353_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:5ef4c37365b81ea9d4643a9200c587d438a78d24517d762b80908971fd75d9ab_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:6430213d3b92e23f1f77bba40e9e7d3d3a047c5988603148d6958bbb197393b3_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:797b4d4cab845e5544ca6544a2417578ad135ab38ed180a1f08bec45767e83c2_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:ba9e7533d69126ea08e4445566b637411cc73cd463a9ec6ff1f91b8c3441fbfd_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:21176a1983a9b934e8b8ad5ff1db86540883bb160e15a733b7ef4f6c11974da9_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:abad27dec9638ed160bce90a10facb04fdce91bcb2969470ffc8c436ac01de50_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:ca3c0b4e72dc9df0eb2626898a3b731b31c2503b9dc907a060defb902c708bf4_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:e2abe7d7c1a00c6b7911e6db28924f50640abfd88a99ade0690f5394a42e4fdc_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:0233c53a96cc685fc0d82596b84ab8a783ce7affba89dd85def7ad7eacf5bdfe_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:574420f56707cf437a81dc92ad5ec529d9e9c5a668dbd569b41becc7fde7e194_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:60e660bf0d066c3f799259e57000dcb1d7974753c49771d15361321353ebeb4a_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:bc80d85ced33bf5b7dc60d6d7555949c98cc4ee506d10ea5bb8a8691e58e8f42_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:6d72e8f7ae3d541d98cecbd49ec0442097b853cd183f16407795230357eeaaca_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:9577a704733f400f9c9782e6699d180e5a68bbccf44374f8b5e7e48cd2f2aba9_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:abc1f2c6256422a1ecf184a7a942540c365010c2ed07db7c9d96dd3ecb50cbe5_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:f4ddc5a0b88daa83b106e7b09cd57ceb1082f739a4007ad6702e585af73e75e5_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:080f4f2c2db999ee35e700f9090f8bd31cd8e3d345328899cde5406493208a28_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:78adef6bb83fd97673c8b5d4e889709bd1234a06cf2ee57703fe44500e0ff96c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:98dd1742832e1471100f2aecfe0dc6ac94916c790af0c2ea05ee846e841138b0_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:baa6ab272bef882a138529cc0a0accaaf18cc4a2b553d009b294a2d5a258721e_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:1ebe7d8d82749c71de1ac13bf94c8050bcac182918df254a3622215f8c6bc68f_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:62f9795ac0590dea90f9075d2d98e29714c5eca29b394933d79e94eec926ff8e_amd64	—	Workaround

Threats

Impact Important

CVE-2026-4926

A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1333 - Inefficient Regular Expression Complexity

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:085f4b5bef40a152a53dab4032b8f86d00f19186e0e8cc44c43654172c7247e0_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:503dfe60277d2a1b378eec07e179928add2af1d968614f46756a47df11a58579_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:78cf27a0aa87e23ead38510b5f76b56053fd2fb19dd8dffef714106b035e66cc_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:baf3be5dd66c26b9295da4d9202e93fa1c718b5ac0700bb450acccbd57367082_s390x	—	Vendor Fix fix Workaround

Known not affected 110 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:3362761d6a5d99330d303adc87e1181369243147d56347362bfba62cc8047081_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:862cb4601db2eb288b72e993ed1c4b6bbb2e4dd37050d549ba86e6eafc3f1045_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:906f8d05d464820d7f46e9e3e437700adb70397eab300f2c0a2f281ee5322dfd_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:a9ec99ae45084783f79da5a8e41f42763b006489c84ffae0758ce12cea05948d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:9e37aeb2f8f5d89367c4c1415abbd66464aae126eda811f832a87c7fa1e914b0_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:a35e350ec5c0172601f25ac89fcbc48ff8c83ad2c5fdf798de917d9b046c9cc7_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:d833ed5b6de160d7e0cbf35cd5d7f93bfaa74acb2b12846ccc1eef41ef48074d_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:e81951b19451ffa56f4d44225c241229db250e2b87b0cf546d57506ad0911f41_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:443ed5ee0076c027a2af55183ce364225dce498e42fccdb259efd69ff412675f_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:b5424fd9f704ddf4ab272fc1629a64d3a658b9aa40c4dcfac58dd6ca51b48220_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:ccbd0249255d0fc1434a1c6fde96fbd6dc1059becefaa475d9cddd61dff0a970_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:fb3278021a45367ac357ed32872eb4e671844faad6b9eb9b08db0e476849bae4_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:17ed60234239a1b0b5081ae28b2a2a154ed79eaac34c0cf502c45bef6bb90c0a_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:754ad996d3fb66fffb7bfe0ee9289c9191b3ccecebd509ea99b3906f6f9e2208_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:a11554edb0f50083024b36f2dc13c5b6a60211a1ecaad30a78409a433512a705_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:f01ed355b061010f9584a77daad927f1ccca5097cc17e16823fdd2818508578b_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:77ab5de9e627656bd9668724e2f59a37510a4905801edd183ecf380dcd9fe585_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:b37af6bef902e0eb955654296154355ed9941569929d2db7a22a595b0fa0162c_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:c076cf5c0e56918bb49e8c353bc48265a9d88834934563259308cad15eb304e2_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:dfc798d88444141412d07492a1f426f083c6b7e3499db2f78abfeba0123c5821_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:08bef41a15e546deccf883d64ce525df7efd0511a5a52872f1e7486d3a4e0e75_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:1f03bd9054901f83e354a52bde14ad3e5ad8e556db128e22cf7ebe7a46ac7c44_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:76084c25d8de65c919ec760b8ddb9ae338da5cebe4b9ea03294c7b6466e0c3b6_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:c135bdbb6697bdfd4d711d71f70d915839c08057ba7aab7bf7117643f1f47bf8_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:01780af012f7fad2b3f8975e9a77a8e9d85913ac6869c60d94b9f7b0e71c4e41_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:12726676bf7f888bf49734aab1616046d8c3cef36cda5016de02cb09e36b51a5_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:6b5eac6cb840fc63462c7ba90f9119425b47abe39ce3a035c58aa1c24d20274e_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:72e638615fa4eccc23719eb2cc6892531508c41a2b3b80efcdcd34360d99b6e9_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:5cd20de178fd45b1775781a93e4e62bd61023175d5faf624ac8d8713fd7f8fe2_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:6be2a2d2a07c738c7ff04fbf4570a45d6c9a78c6d340e10e8a144461867b45d3_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:af8ef0d4d9e733370babbe0f6647d20d8f5fdc01349738a173803a7782bab2c1_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:e77be358fa816a3bc3dcb40fae651d317da03e6834049dc0c9b2f868a27180e0_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:653cdc00e8cd62c3606c5680f550c45b72294ff711dd4fa84ed03180d836cfad_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:65813a1c96deb46ed24ae6ec32a41f381a58facacbb5ab953914298b80d27d73_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:baf0e909c2a0f3b516e2b4f7417f1557a73f7139480628b9efa487b419784d2e_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:d4e8c0cbc0691b961a28b670e61fb52941d99804f83a0e3f82c610e800369c08_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:21cd299b7438e018c4f3c9a0092df03f0c042c9cb40bf326056e02740fd2ccab_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:243badf894b3ecf3ae0e42447e8d4415644d865f01b292416819c0e4d969cec8_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:95d30d40d9cd98affa936cecb673fa0993721f25501fb975d7e7c126ecfa141c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:dea1282e383022fae2548eab7fcb110afc78276336311729711f200279cc636f_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:08ce19063089c5e2432394a730287e17d9aa680aad9c228ca8163a5c86de5283_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:19166f3323bf6cb6d86bc917960a452002e9d10e796228c564b400e7849fe164_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:dac798d7cd52804aa0fed81b8743d51a7f35a34a920067a44270ed866164688d_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:eea7078b27cbde48374b22f3c234d7b9cf40119a1e9d226ade575181eff11ec5_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:12040aec052e056cc93acb8d99b725c6ff518445b69e86971f60fe1460d3b80d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:3f7645c26cacd70cddf3ebf45410ab4e2fd7f34be1e0abf022361a1c486a8e0a_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:b16272547b35c5059b4954c2e75ef1aaae29f92576cfbf0a4fc6b870558ce085_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:ff4fe0dcbba51685739002ed8703822ae55b9fab6ce0f5bc5e1600b5ad53b474_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:0e76b0c1624bd3f7afc103028de41fad5df327f662eb92362243c933d53d7a5e_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:480e49c6ab2805182121f2204023cc35974b803ecbe8f5f6a1ce8b5c9940df9d_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:8a1cfb834027a80ed63f6baa04138c297b207129cbe2badb5288021ab2d01f9e_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:a546ff44cde478da177dccf2d3cc93667422297e6bf40923955f3ca9801e6319_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:007212c6697175cde671e7150b58b05b31f02641451998023ca867e868a5b393_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:4450f35880b8a42c3dfec603143c0ded87b94b68472efd074eaf850e09cb1949_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:648591fde25f36d752c6f7ba06224fb939f2f227273a13a5e14371147ac5a7f5_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:e3711929d6bc96143d385d0d95d0b7cd41ff2271b6be677ac59681c61e91e1a7_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:7a4a38fb52698e0edb0426bdd5bd8eda86b08758548c22091301a6be10579fa3_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:9b92e13859d120c01c8776e7dbe9e56e9569351cdc7ccc53ac34f3e3034feae1_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:b915260ad68010ba87a875e45bf2a80f92da715b73a1f7277d4f1a40f348428c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:f07c731d554f88d8531de6981846e05b817bea2e3f254a0c7dc6a21ba51f8838_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:12e4d0feaa59c71d5e846dce888e17467a6922aa08a9c2971ae15a47604c8cc2_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:4e335af8d2fc8b8df96c1338a17fe2e32c51bd16229008ec66d40cc24187a8c6_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:878088c9089f2d9b9eda19edb88c6f11b65316dcdd0291049e357d7d6f5ba9b2_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:fc3ff82f0cf98d1e8031a0a53c4fc06d4783b668b8d22229fd0a13d74b3e3d84_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:0750bf5476cab8d10288afced3704b87d988e37575ee88cb9c5aeb3a117bbeaf_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:1626a744d4621b09beff3171eefef651b426172ebac25d5a5f9c4ccc4d5aae42_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:17b5bc347764f23b1e17bd990e0050a2934315211fa11642b1a206027a356a86_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:e7b4f3a3e5734de252d6214ec345479704c4fe7dcf3ed7bebe5a2a5166f00489_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:264726e334c529ad8a6e8f0fb1591cff3360fc57b9bfec4d937852e8c636547a_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:4f334f34591be73a659548d4f2f3f59bff8ba7e2c76863d9eb81ed67c3c78e75_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:c14363d97da2591ea16578d2825ac7841102bcd205f0d014bc04697257b9c907_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:e66798c501870aded1197e33098b181135d7465275f7b18969ac73846db2ae6b_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:7cf2d4764244f9d24861c597939224dfad6935823bb5271279e9c1711390f782_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:c9c997790102efacb3e3001fc833cbb9c0e5d43aa506b499158a537af1cb7f84_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:d2a1bfaf4fe65ac2807409febecca76a1dfea376455c5c92cc9ebd6e43b3d6d9_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:e8edf62d6739397fa96c44c502c7ee64e0fe884a526d8d2b37ce39f04e3d8f39_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:5a18e28d9adc93f7429ee2aeddfed16beabb8ea777b568576f35c85579902a81_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:6e5abb4c408bdb38987e13f09d6a1699de40ef39243ac91a5731c48b377169b0_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:87b7771c1db5e931baf83d00528dc7b65e90c8828032741a5a1c37cbc4a300b8_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:94b9b25cba1fd560c6572ebde1cce9ea9c959ce31d2f02561e68ff7db580bdcf_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:295002a40f4e50912d15e5e101306f2281be8dbf6440c4573d56098ad35745d5_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:93b09e8400609e2507c4909d446e00f709d3c1e1c2f5f18f0e9d83f215c5e7b6_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:b332d45519f1d5ea72c3e0ad5cfa2c182a8f9fbba682bd3a86734999e33519e4_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:bb17450a5a8ff1ff4b364523e0b19cd2913f560f10e0214a0405ee18d2a36fd1_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:533bd486273743daf1f023b3d77f0a151fe1e5c6f63f806588964a5bd1b6f1d6_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:6939f0ea8c418da6173f39771e7936f69cd3a244587d7c3cc736bf261ba39a34_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:cfe1245a29cc96306898ebde112a7cebce0865e5a977f8959e786022235a78a0_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:d7199aa13e57c289cfb7c163dcb6d08a01a5b54f750c8d792d302cf104126353_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:5ef4c37365b81ea9d4643a9200c587d438a78d24517d762b80908971fd75d9ab_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:6430213d3b92e23f1f77bba40e9e7d3d3a047c5988603148d6958bbb197393b3_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:797b4d4cab845e5544ca6544a2417578ad135ab38ed180a1f08bec45767e83c2_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:ba9e7533d69126ea08e4445566b637411cc73cd463a9ec6ff1f91b8c3441fbfd_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:21176a1983a9b934e8b8ad5ff1db86540883bb160e15a733b7ef4f6c11974da9_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:abad27dec9638ed160bce90a10facb04fdce91bcb2969470ffc8c436ac01de50_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:ca3c0b4e72dc9df0eb2626898a3b731b31c2503b9dc907a060defb902c708bf4_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:e2abe7d7c1a00c6b7911e6db28924f50640abfd88a99ade0690f5394a42e4fdc_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:0233c53a96cc685fc0d82596b84ab8a783ce7affba89dd85def7ad7eacf5bdfe_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:574420f56707cf437a81dc92ad5ec529d9e9c5a668dbd569b41becc7fde7e194_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:60e660bf0d066c3f799259e57000dcb1d7974753c49771d15361321353ebeb4a_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:bc80d85ced33bf5b7dc60d6d7555949c98cc4ee506d10ea5bb8a8691e58e8f42_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:6d72e8f7ae3d541d98cecbd49ec0442097b853cd183f16407795230357eeaaca_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:9577a704733f400f9c9782e6699d180e5a68bbccf44374f8b5e7e48cd2f2aba9_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:abc1f2c6256422a1ecf184a7a942540c365010c2ed07db7c9d96dd3ecb50cbe5_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:f4ddc5a0b88daa83b106e7b09cd57ceb1082f739a4007ad6702e585af73e75e5_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:080f4f2c2db999ee35e700f9090f8bd31cd8e3d345328899cde5406493208a28_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:78adef6bb83fd97673c8b5d4e889709bd1234a06cf2ee57703fe44500e0ff96c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:98dd1742832e1471100f2aecfe0dc6ac94916c790af0c2ea05ee846e841138b0_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:baa6ab272bef882a138529cc0a0accaaf18cc4a2b553d009b294a2d5a258721e_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:1ebe7d8d82749c71de1ac13bf94c8050bcac182918df254a3622215f8c6bc68f_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:62f9795ac0590dea90f9075d2d98e29714c5eca29b394933d79e94eec926ff8e_amd64	—	Workaround

Threats

Impact Important

CVE-2026-6321

A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by providing a specially crafted Uniform Resource Locator (URL) containing percent-encoded path separators and dot segments. Due to incorrect processing, fast-uri would decode these elements before proper normalization, leading to distinct URLs resolving to the same internal path. This could allow an attacker to bypass security policies that rely on path-based comparisons, potentially gaining unauthorized access to resources.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:5a18e28d9adc93f7429ee2aeddfed16beabb8ea777b568576f35c85579902a81_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:6e5abb4c408bdb38987e13f09d6a1699de40ef39243ac91a5731c48b377169b0_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:87b7771c1db5e931baf83d00528dc7b65e90c8828032741a5a1c37cbc4a300b8_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:94b9b25cba1fd560c6572ebde1cce9ea9c959ce31d2f02561e68ff7db580bdcf_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:0233c53a96cc685fc0d82596b84ab8a783ce7affba89dd85def7ad7eacf5bdfe_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:574420f56707cf437a81dc92ad5ec529d9e9c5a668dbd569b41becc7fde7e194_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:60e660bf0d066c3f799259e57000dcb1d7974753c49771d15361321353ebeb4a_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:bc80d85ced33bf5b7dc60d6d7555949c98cc4ee506d10ea5bb8a8691e58e8f42_arm64	—	Vendor Fix fix

Known not affected 106 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:3362761d6a5d99330d303adc87e1181369243147d56347362bfba62cc8047081_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:862cb4601db2eb288b72e993ed1c4b6bbb2e4dd37050d549ba86e6eafc3f1045_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:906f8d05d464820d7f46e9e3e437700adb70397eab300f2c0a2f281ee5322dfd_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:a9ec99ae45084783f79da5a8e41f42763b006489c84ffae0758ce12cea05948d_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:9e37aeb2f8f5d89367c4c1415abbd66464aae126eda811f832a87c7fa1e914b0_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:a35e350ec5c0172601f25ac89fcbc48ff8c83ad2c5fdf798de917d9b046c9cc7_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:d833ed5b6de160d7e0cbf35cd5d7f93bfaa74acb2b12846ccc1eef41ef48074d_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:e81951b19451ffa56f4d44225c241229db250e2b87b0cf546d57506ad0911f41_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:443ed5ee0076c027a2af55183ce364225dce498e42fccdb259efd69ff412675f_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:b5424fd9f704ddf4ab272fc1629a64d3a658b9aa40c4dcfac58dd6ca51b48220_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:ccbd0249255d0fc1434a1c6fde96fbd6dc1059becefaa475d9cddd61dff0a970_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:fb3278021a45367ac357ed32872eb4e671844faad6b9eb9b08db0e476849bae4_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:17ed60234239a1b0b5081ae28b2a2a154ed79eaac34c0cf502c45bef6bb90c0a_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:754ad996d3fb66fffb7bfe0ee9289c9191b3ccecebd509ea99b3906f6f9e2208_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:a11554edb0f50083024b36f2dc13c5b6a60211a1ecaad30a78409a433512a705_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:f01ed355b061010f9584a77daad927f1ccca5097cc17e16823fdd2818508578b_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:77ab5de9e627656bd9668724e2f59a37510a4905801edd183ecf380dcd9fe585_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:b37af6bef902e0eb955654296154355ed9941569929d2db7a22a595b0fa0162c_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:c076cf5c0e56918bb49e8c353bc48265a9d88834934563259308cad15eb304e2_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:dfc798d88444141412d07492a1f426f083c6b7e3499db2f78abfeba0123c5821_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:08bef41a15e546deccf883d64ce525df7efd0511a5a52872f1e7486d3a4e0e75_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:1f03bd9054901f83e354a52bde14ad3e5ad8e556db128e22cf7ebe7a46ac7c44_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:76084c25d8de65c919ec760b8ddb9ae338da5cebe4b9ea03294c7b6466e0c3b6_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:c135bdbb6697bdfd4d711d71f70d915839c08057ba7aab7bf7117643f1f47bf8_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:01780af012f7fad2b3f8975e9a77a8e9d85913ac6869c60d94b9f7b0e71c4e41_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:12726676bf7f888bf49734aab1616046d8c3cef36cda5016de02cb09e36b51a5_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:6b5eac6cb840fc63462c7ba90f9119425b47abe39ce3a035c58aa1c24d20274e_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:72e638615fa4eccc23719eb2cc6892531508c41a2b3b80efcdcd34360d99b6e9_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:5cd20de178fd45b1775781a93e4e62bd61023175d5faf624ac8d8713fd7f8fe2_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:6be2a2d2a07c738c7ff04fbf4570a45d6c9a78c6d340e10e8a144461867b45d3_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:af8ef0d4d9e733370babbe0f6647d20d8f5fdc01349738a173803a7782bab2c1_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:e77be358fa816a3bc3dcb40fae651d317da03e6834049dc0c9b2f868a27180e0_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:653cdc00e8cd62c3606c5680f550c45b72294ff711dd4fa84ed03180d836cfad_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:65813a1c96deb46ed24ae6ec32a41f381a58facacbb5ab953914298b80d27d73_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:baf0e909c2a0f3b516e2b4f7417f1557a73f7139480628b9efa487b419784d2e_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:d4e8c0cbc0691b961a28b670e61fb52941d99804f83a0e3f82c610e800369c08_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:21cd299b7438e018c4f3c9a0092df03f0c042c9cb40bf326056e02740fd2ccab_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:243badf894b3ecf3ae0e42447e8d4415644d865f01b292416819c0e4d969cec8_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:95d30d40d9cd98affa936cecb673fa0993721f25501fb975d7e7c126ecfa141c_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:dea1282e383022fae2548eab7fcb110afc78276336311729711f200279cc636f_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:08ce19063089c5e2432394a730287e17d9aa680aad9c228ca8163a5c86de5283_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:19166f3323bf6cb6d86bc917960a452002e9d10e796228c564b400e7849fe164_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:dac798d7cd52804aa0fed81b8743d51a7f35a34a920067a44270ed866164688d_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:eea7078b27cbde48374b22f3c234d7b9cf40119a1e9d226ade575181eff11ec5_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:12040aec052e056cc93acb8d99b725c6ff518445b69e86971f60fe1460d3b80d_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:3f7645c26cacd70cddf3ebf45410ab4e2fd7f34be1e0abf022361a1c486a8e0a_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:b16272547b35c5059b4954c2e75ef1aaae29f92576cfbf0a4fc6b870558ce085_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:ff4fe0dcbba51685739002ed8703822ae55b9fab6ce0f5bc5e1600b5ad53b474_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:0e76b0c1624bd3f7afc103028de41fad5df327f662eb92362243c933d53d7a5e_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:480e49c6ab2805182121f2204023cc35974b803ecbe8f5f6a1ce8b5c9940df9d_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:8a1cfb834027a80ed63f6baa04138c297b207129cbe2badb5288021ab2d01f9e_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:a546ff44cde478da177dccf2d3cc93667422297e6bf40923955f3ca9801e6319_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:007212c6697175cde671e7150b58b05b31f02641451998023ca867e868a5b393_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:4450f35880b8a42c3dfec603143c0ded87b94b68472efd074eaf850e09cb1949_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:648591fde25f36d752c6f7ba06224fb939f2f227273a13a5e14371147ac5a7f5_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:e3711929d6bc96143d385d0d95d0b7cd41ff2271b6be677ac59681c61e91e1a7_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:085f4b5bef40a152a53dab4032b8f86d00f19186e0e8cc44c43654172c7247e0_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:503dfe60277d2a1b378eec07e179928add2af1d968614f46756a47df11a58579_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:78cf27a0aa87e23ead38510b5f76b56053fd2fb19dd8dffef714106b035e66cc_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:baf3be5dd66c26b9295da4d9202e93fa1c718b5ac0700bb450acccbd57367082_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:7a4a38fb52698e0edb0426bdd5bd8eda86b08758548c22091301a6be10579fa3_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:9b92e13859d120c01c8776e7dbe9e56e9569351cdc7ccc53ac34f3e3034feae1_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:b915260ad68010ba87a875e45bf2a80f92da715b73a1f7277d4f1a40f348428c_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:f07c731d554f88d8531de6981846e05b817bea2e3f254a0c7dc6a21ba51f8838_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:12e4d0feaa59c71d5e846dce888e17467a6922aa08a9c2971ae15a47604c8cc2_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:4e335af8d2fc8b8df96c1338a17fe2e32c51bd16229008ec66d40cc24187a8c6_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:878088c9089f2d9b9eda19edb88c6f11b65316dcdd0291049e357d7d6f5ba9b2_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:fc3ff82f0cf98d1e8031a0a53c4fc06d4783b668b8d22229fd0a13d74b3e3d84_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:0750bf5476cab8d10288afced3704b87d988e37575ee88cb9c5aeb3a117bbeaf_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:1626a744d4621b09beff3171eefef651b426172ebac25d5a5f9c4ccc4d5aae42_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:17b5bc347764f23b1e17bd990e0050a2934315211fa11642b1a206027a356a86_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:e7b4f3a3e5734de252d6214ec345479704c4fe7dcf3ed7bebe5a2a5166f00489_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:264726e334c529ad8a6e8f0fb1591cff3360fc57b9bfec4d937852e8c636547a_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:4f334f34591be73a659548d4f2f3f59bff8ba7e2c76863d9eb81ed67c3c78e75_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:c14363d97da2591ea16578d2825ac7841102bcd205f0d014bc04697257b9c907_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:e66798c501870aded1197e33098b181135d7465275f7b18969ac73846db2ae6b_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:7cf2d4764244f9d24861c597939224dfad6935823bb5271279e9c1711390f782_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:c9c997790102efacb3e3001fc833cbb9c0e5d43aa506b499158a537af1cb7f84_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:d2a1bfaf4fe65ac2807409febecca76a1dfea376455c5c92cc9ebd6e43b3d6d9_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:e8edf62d6739397fa96c44c502c7ee64e0fe884a526d8d2b37ce39f04e3d8f39_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:295002a40f4e50912d15e5e101306f2281be8dbf6440c4573d56098ad35745d5_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:93b09e8400609e2507c4909d446e00f709d3c1e1c2f5f18f0e9d83f215c5e7b6_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:b332d45519f1d5ea72c3e0ad5cfa2c182a8f9fbba682bd3a86734999e33519e4_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:bb17450a5a8ff1ff4b364523e0b19cd2913f560f10e0214a0405ee18d2a36fd1_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:533bd486273743daf1f023b3d77f0a151fe1e5c6f63f806588964a5bd1b6f1d6_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:6939f0ea8c418da6173f39771e7936f69cd3a244587d7c3cc736bf261ba39a34_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:cfe1245a29cc96306898ebde112a7cebce0865e5a977f8959e786022235a78a0_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:d7199aa13e57c289cfb7c163dcb6d08a01a5b54f750c8d792d302cf104126353_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:5ef4c37365b81ea9d4643a9200c587d438a78d24517d762b80908971fd75d9ab_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:6430213d3b92e23f1f77bba40e9e7d3d3a047c5988603148d6958bbb197393b3_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:797b4d4cab845e5544ca6544a2417578ad135ab38ed180a1f08bec45767e83c2_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:ba9e7533d69126ea08e4445566b637411cc73cd463a9ec6ff1f91b8c3441fbfd_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:21176a1983a9b934e8b8ad5ff1db86540883bb160e15a733b7ef4f6c11974da9_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:abad27dec9638ed160bce90a10facb04fdce91bcb2969470ffc8c436ac01de50_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:ca3c0b4e72dc9df0eb2626898a3b731b31c2503b9dc907a060defb902c708bf4_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:e2abe7d7c1a00c6b7911e6db28924f50640abfd88a99ade0690f5394a42e4fdc_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:6d72e8f7ae3d541d98cecbd49ec0442097b853cd183f16407795230357eeaaca_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:9577a704733f400f9c9782e6699d180e5a68bbccf44374f8b5e7e48cd2f2aba9_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:abc1f2c6256422a1ecf184a7a942540c365010c2ed07db7c9d96dd3ecb50cbe5_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:f4ddc5a0b88daa83b106e7b09cd57ceb1082f739a4007ad6702e585af73e75e5_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:080f4f2c2db999ee35e700f9090f8bd31cd8e3d345328899cde5406493208a28_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:78adef6bb83fd97673c8b5d4e889709bd1234a06cf2ee57703fe44500e0ff96c_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:98dd1742832e1471100f2aecfe0dc6ac94916c790af0c2ea05ee846e841138b0_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:baa6ab272bef882a138529cc0a0accaaf18cc4a2b553d009b294a2d5a258721e_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:1ebe7d8d82749c71de1ac13bf94c8050bcac182918df254a3622215f8c6bc68f_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:62f9795ac0590dea90f9075d2d98e29714c5eca29b394933d79e94eec926ff8e_amd64		—

Threats

Impact Important

CVE-2026-23490

A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:264726e334c529ad8a6e8f0fb1591cff3360fc57b9bfec4d937852e8c636547a_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:4f334f34591be73a659548d4f2f3f59bff8ba7e2c76863d9eb81ed67c3c78e75_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:c14363d97da2591ea16578d2825ac7841102bcd205f0d014bc04697257b9c907_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:e66798c501870aded1197e33098b181135d7465275f7b18969ac73846db2ae6b_amd64	—	Vendor Fix fix

Known not affected 110 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:3362761d6a5d99330d303adc87e1181369243147d56347362bfba62cc8047081_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:862cb4601db2eb288b72e993ed1c4b6bbb2e4dd37050d549ba86e6eafc3f1045_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:906f8d05d464820d7f46e9e3e437700adb70397eab300f2c0a2f281ee5322dfd_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:a9ec99ae45084783f79da5a8e41f42763b006489c84ffae0758ce12cea05948d_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:9e37aeb2f8f5d89367c4c1415abbd66464aae126eda811f832a87c7fa1e914b0_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:a35e350ec5c0172601f25ac89fcbc48ff8c83ad2c5fdf798de917d9b046c9cc7_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:d833ed5b6de160d7e0cbf35cd5d7f93bfaa74acb2b12846ccc1eef41ef48074d_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:e81951b19451ffa56f4d44225c241229db250e2b87b0cf546d57506ad0911f41_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:443ed5ee0076c027a2af55183ce364225dce498e42fccdb259efd69ff412675f_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:b5424fd9f704ddf4ab272fc1629a64d3a658b9aa40c4dcfac58dd6ca51b48220_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:ccbd0249255d0fc1434a1c6fde96fbd6dc1059becefaa475d9cddd61dff0a970_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:fb3278021a45367ac357ed32872eb4e671844faad6b9eb9b08db0e476849bae4_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:17ed60234239a1b0b5081ae28b2a2a154ed79eaac34c0cf502c45bef6bb90c0a_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:754ad996d3fb66fffb7bfe0ee9289c9191b3ccecebd509ea99b3906f6f9e2208_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:a11554edb0f50083024b36f2dc13c5b6a60211a1ecaad30a78409a433512a705_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:f01ed355b061010f9584a77daad927f1ccca5097cc17e16823fdd2818508578b_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:77ab5de9e627656bd9668724e2f59a37510a4905801edd183ecf380dcd9fe585_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:b37af6bef902e0eb955654296154355ed9941569929d2db7a22a595b0fa0162c_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:c076cf5c0e56918bb49e8c353bc48265a9d88834934563259308cad15eb304e2_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:dfc798d88444141412d07492a1f426f083c6b7e3499db2f78abfeba0123c5821_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:08bef41a15e546deccf883d64ce525df7efd0511a5a52872f1e7486d3a4e0e75_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:1f03bd9054901f83e354a52bde14ad3e5ad8e556db128e22cf7ebe7a46ac7c44_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:76084c25d8de65c919ec760b8ddb9ae338da5cebe4b9ea03294c7b6466e0c3b6_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:c135bdbb6697bdfd4d711d71f70d915839c08057ba7aab7bf7117643f1f47bf8_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:01780af012f7fad2b3f8975e9a77a8e9d85913ac6869c60d94b9f7b0e71c4e41_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:12726676bf7f888bf49734aab1616046d8c3cef36cda5016de02cb09e36b51a5_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:6b5eac6cb840fc63462c7ba90f9119425b47abe39ce3a035c58aa1c24d20274e_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:72e638615fa4eccc23719eb2cc6892531508c41a2b3b80efcdcd34360d99b6e9_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:5cd20de178fd45b1775781a93e4e62bd61023175d5faf624ac8d8713fd7f8fe2_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:6be2a2d2a07c738c7ff04fbf4570a45d6c9a78c6d340e10e8a144461867b45d3_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:af8ef0d4d9e733370babbe0f6647d20d8f5fdc01349738a173803a7782bab2c1_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:e77be358fa816a3bc3dcb40fae651d317da03e6834049dc0c9b2f868a27180e0_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:653cdc00e8cd62c3606c5680f550c45b72294ff711dd4fa84ed03180d836cfad_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:65813a1c96deb46ed24ae6ec32a41f381a58facacbb5ab953914298b80d27d73_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:baf0e909c2a0f3b516e2b4f7417f1557a73f7139480628b9efa487b419784d2e_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:d4e8c0cbc0691b961a28b670e61fb52941d99804f83a0e3f82c610e800369c08_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:21cd299b7438e018c4f3c9a0092df03f0c042c9cb40bf326056e02740fd2ccab_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:243badf894b3ecf3ae0e42447e8d4415644d865f01b292416819c0e4d969cec8_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:95d30d40d9cd98affa936cecb673fa0993721f25501fb975d7e7c126ecfa141c_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:dea1282e383022fae2548eab7fcb110afc78276336311729711f200279cc636f_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:08ce19063089c5e2432394a730287e17d9aa680aad9c228ca8163a5c86de5283_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:19166f3323bf6cb6d86bc917960a452002e9d10e796228c564b400e7849fe164_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:dac798d7cd52804aa0fed81b8743d51a7f35a34a920067a44270ed866164688d_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:eea7078b27cbde48374b22f3c234d7b9cf40119a1e9d226ade575181eff11ec5_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:12040aec052e056cc93acb8d99b725c6ff518445b69e86971f60fe1460d3b80d_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:3f7645c26cacd70cddf3ebf45410ab4e2fd7f34be1e0abf022361a1c486a8e0a_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:b16272547b35c5059b4954c2e75ef1aaae29f92576cfbf0a4fc6b870558ce085_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:ff4fe0dcbba51685739002ed8703822ae55b9fab6ce0f5bc5e1600b5ad53b474_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:0e76b0c1624bd3f7afc103028de41fad5df327f662eb92362243c933d53d7a5e_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:480e49c6ab2805182121f2204023cc35974b803ecbe8f5f6a1ce8b5c9940df9d_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:8a1cfb834027a80ed63f6baa04138c297b207129cbe2badb5288021ab2d01f9e_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:a546ff44cde478da177dccf2d3cc93667422297e6bf40923955f3ca9801e6319_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:007212c6697175cde671e7150b58b05b31f02641451998023ca867e868a5b393_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:4450f35880b8a42c3dfec603143c0ded87b94b68472efd074eaf850e09cb1949_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:648591fde25f36d752c6f7ba06224fb939f2f227273a13a5e14371147ac5a7f5_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:e3711929d6bc96143d385d0d95d0b7cd41ff2271b6be677ac59681c61e91e1a7_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:085f4b5bef40a152a53dab4032b8f86d00f19186e0e8cc44c43654172c7247e0_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:503dfe60277d2a1b378eec07e179928add2af1d968614f46756a47df11a58579_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:78cf27a0aa87e23ead38510b5f76b56053fd2fb19dd8dffef714106b035e66cc_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:baf3be5dd66c26b9295da4d9202e93fa1c718b5ac0700bb450acccbd57367082_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:7a4a38fb52698e0edb0426bdd5bd8eda86b08758548c22091301a6be10579fa3_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:9b92e13859d120c01c8776e7dbe9e56e9569351cdc7ccc53ac34f3e3034feae1_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:b915260ad68010ba87a875e45bf2a80f92da715b73a1f7277d4f1a40f348428c_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:f07c731d554f88d8531de6981846e05b817bea2e3f254a0c7dc6a21ba51f8838_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:12e4d0feaa59c71d5e846dce888e17467a6922aa08a9c2971ae15a47604c8cc2_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:4e335af8d2fc8b8df96c1338a17fe2e32c51bd16229008ec66d40cc24187a8c6_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:878088c9089f2d9b9eda19edb88c6f11b65316dcdd0291049e357d7d6f5ba9b2_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:fc3ff82f0cf98d1e8031a0a53c4fc06d4783b668b8d22229fd0a13d74b3e3d84_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:0750bf5476cab8d10288afced3704b87d988e37575ee88cb9c5aeb3a117bbeaf_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:1626a744d4621b09beff3171eefef651b426172ebac25d5a5f9c4ccc4d5aae42_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:17b5bc347764f23b1e17bd990e0050a2934315211fa11642b1a206027a356a86_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:e7b4f3a3e5734de252d6214ec345479704c4fe7dcf3ed7bebe5a2a5166f00489_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:7cf2d4764244f9d24861c597939224dfad6935823bb5271279e9c1711390f782_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:c9c997790102efacb3e3001fc833cbb9c0e5d43aa506b499158a537af1cb7f84_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:d2a1bfaf4fe65ac2807409febecca76a1dfea376455c5c92cc9ebd6e43b3d6d9_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:e8edf62d6739397fa96c44c502c7ee64e0fe884a526d8d2b37ce39f04e3d8f39_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:5a18e28d9adc93f7429ee2aeddfed16beabb8ea777b568576f35c85579902a81_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:6e5abb4c408bdb38987e13f09d6a1699de40ef39243ac91a5731c48b377169b0_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:87b7771c1db5e931baf83d00528dc7b65e90c8828032741a5a1c37cbc4a300b8_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:94b9b25cba1fd560c6572ebde1cce9ea9c959ce31d2f02561e68ff7db580bdcf_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:295002a40f4e50912d15e5e101306f2281be8dbf6440c4573d56098ad35745d5_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:93b09e8400609e2507c4909d446e00f709d3c1e1c2f5f18f0e9d83f215c5e7b6_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:b332d45519f1d5ea72c3e0ad5cfa2c182a8f9fbba682bd3a86734999e33519e4_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:bb17450a5a8ff1ff4b364523e0b19cd2913f560f10e0214a0405ee18d2a36fd1_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:533bd486273743daf1f023b3d77f0a151fe1e5c6f63f806588964a5bd1b6f1d6_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:6939f0ea8c418da6173f39771e7936f69cd3a244587d7c3cc736bf261ba39a34_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:cfe1245a29cc96306898ebde112a7cebce0865e5a977f8959e786022235a78a0_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:d7199aa13e57c289cfb7c163dcb6d08a01a5b54f750c8d792d302cf104126353_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:5ef4c37365b81ea9d4643a9200c587d438a78d24517d762b80908971fd75d9ab_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:6430213d3b92e23f1f77bba40e9e7d3d3a047c5988603148d6958bbb197393b3_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:797b4d4cab845e5544ca6544a2417578ad135ab38ed180a1f08bec45767e83c2_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:ba9e7533d69126ea08e4445566b637411cc73cd463a9ec6ff1f91b8c3441fbfd_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:21176a1983a9b934e8b8ad5ff1db86540883bb160e15a733b7ef4f6c11974da9_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:abad27dec9638ed160bce90a10facb04fdce91bcb2969470ffc8c436ac01de50_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:ca3c0b4e72dc9df0eb2626898a3b731b31c2503b9dc907a060defb902c708bf4_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:e2abe7d7c1a00c6b7911e6db28924f50640abfd88a99ade0690f5394a42e4fdc_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:0233c53a96cc685fc0d82596b84ab8a783ce7affba89dd85def7ad7eacf5bdfe_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:574420f56707cf437a81dc92ad5ec529d9e9c5a668dbd569b41becc7fde7e194_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:60e660bf0d066c3f799259e57000dcb1d7974753c49771d15361321353ebeb4a_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:bc80d85ced33bf5b7dc60d6d7555949c98cc4ee506d10ea5bb8a8691e58e8f42_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:6d72e8f7ae3d541d98cecbd49ec0442097b853cd183f16407795230357eeaaca_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:9577a704733f400f9c9782e6699d180e5a68bbccf44374f8b5e7e48cd2f2aba9_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:abc1f2c6256422a1ecf184a7a942540c365010c2ed07db7c9d96dd3ecb50cbe5_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:f4ddc5a0b88daa83b106e7b09cd57ceb1082f739a4007ad6702e585af73e75e5_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:080f4f2c2db999ee35e700f9090f8bd31cd8e3d345328899cde5406493208a28_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:78adef6bb83fd97673c8b5d4e889709bd1234a06cf2ee57703fe44500e0ff96c_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:98dd1742832e1471100f2aecfe0dc6ac94916c790af0c2ea05ee846e841138b0_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:baa6ab272bef882a138529cc0a0accaaf18cc4a2b553d009b294a2d5a258721e_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:1ebe7d8d82749c71de1ac13bf94c8050bcac182918df254a3622215f8c6bc68f_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:62f9795ac0590dea90f9075d2d98e29714c5eca29b394933d79e94eec926ff8e_amd64		—

Threats

Impact Important

CVE-2026-28390

A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax (CMS) EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter field without first verifying its presence. This leads to a NULL pointer dereference, which can cause applications processing the attacker-controlled CMS data to crash, resulting in a Denial of Service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 4 products, the same list as for CVE-2026-23490

Known not affected 110 products, the same list as for CVE-2026-23490

Threats

Impact Moderate

CVE-2026-28684

A flaw was found in python-dotenv. A local attacker can exploit this by crafting a symbolic link, which the `set_key()` and `unset_key()` functions in python-dotenv follow when rewriting `.env` files. This can lead to the overwriting of arbitrary files on the system.

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:264726e334c529ad8a6e8f0fb1591cff3360fc57b9bfec4d937852e8c636547a_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:4f334f34591be73a659548d4f2f3f59bff8ba7e2c76863d9eb81ed67c3c78e75_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:c14363d97da2591ea16578d2825ac7841102bcd205f0d014bc04697257b9c907_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:e66798c501870aded1197e33098b181135d7465275f7b18969ac73846db2ae6b_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:295002a40f4e50912d15e5e101306f2281be8dbf6440c4573d56098ad35745d5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:93b09e8400609e2507c4909d446e00f709d3c1e1c2f5f18f0e9d83f215c5e7b6_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:b332d45519f1d5ea72c3e0ad5cfa2c182a8f9fbba682bd3a86734999e33519e4_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:bb17450a5a8ff1ff4b364523e0b19cd2913f560f10e0214a0405ee18d2a36fd1_s390x	—	Vendor Fix fix Workaround

Known not affected 106 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:3362761d6a5d99330d303adc87e1181369243147d56347362bfba62cc8047081_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:862cb4601db2eb288b72e993ed1c4b6bbb2e4dd37050d549ba86e6eafc3f1045_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:906f8d05d464820d7f46e9e3e437700adb70397eab300f2c0a2f281ee5322dfd_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:a9ec99ae45084783f79da5a8e41f42763b006489c84ffae0758ce12cea05948d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:9e37aeb2f8f5d89367c4c1415abbd66464aae126eda811f832a87c7fa1e914b0_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:a35e350ec5c0172601f25ac89fcbc48ff8c83ad2c5fdf798de917d9b046c9cc7_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:d833ed5b6de160d7e0cbf35cd5d7f93bfaa74acb2b12846ccc1eef41ef48074d_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:e81951b19451ffa56f4d44225c241229db250e2b87b0cf546d57506ad0911f41_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:443ed5ee0076c027a2af55183ce364225dce498e42fccdb259efd69ff412675f_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:b5424fd9f704ddf4ab272fc1629a64d3a658b9aa40c4dcfac58dd6ca51b48220_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:ccbd0249255d0fc1434a1c6fde96fbd6dc1059becefaa475d9cddd61dff0a970_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:fb3278021a45367ac357ed32872eb4e671844faad6b9eb9b08db0e476849bae4_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:17ed60234239a1b0b5081ae28b2a2a154ed79eaac34c0cf502c45bef6bb90c0a_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:754ad996d3fb66fffb7bfe0ee9289c9191b3ccecebd509ea99b3906f6f9e2208_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:a11554edb0f50083024b36f2dc13c5b6a60211a1ecaad30a78409a433512a705_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:f01ed355b061010f9584a77daad927f1ccca5097cc17e16823fdd2818508578b_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:77ab5de9e627656bd9668724e2f59a37510a4905801edd183ecf380dcd9fe585_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:b37af6bef902e0eb955654296154355ed9941569929d2db7a22a595b0fa0162c_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:c076cf5c0e56918bb49e8c353bc48265a9d88834934563259308cad15eb304e2_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:dfc798d88444141412d07492a1f426f083c6b7e3499db2f78abfeba0123c5821_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:08bef41a15e546deccf883d64ce525df7efd0511a5a52872f1e7486d3a4e0e75_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:1f03bd9054901f83e354a52bde14ad3e5ad8e556db128e22cf7ebe7a46ac7c44_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:76084c25d8de65c919ec760b8ddb9ae338da5cebe4b9ea03294c7b6466e0c3b6_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:c135bdbb6697bdfd4d711d71f70d915839c08057ba7aab7bf7117643f1f47bf8_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:01780af012f7fad2b3f8975e9a77a8e9d85913ac6869c60d94b9f7b0e71c4e41_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:12726676bf7f888bf49734aab1616046d8c3cef36cda5016de02cb09e36b51a5_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:6b5eac6cb840fc63462c7ba90f9119425b47abe39ce3a035c58aa1c24d20274e_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:72e638615fa4eccc23719eb2cc6892531508c41a2b3b80efcdcd34360d99b6e9_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:5cd20de178fd45b1775781a93e4e62bd61023175d5faf624ac8d8713fd7f8fe2_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:6be2a2d2a07c738c7ff04fbf4570a45d6c9a78c6d340e10e8a144461867b45d3_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:af8ef0d4d9e733370babbe0f6647d20d8f5fdc01349738a173803a7782bab2c1_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:e77be358fa816a3bc3dcb40fae651d317da03e6834049dc0c9b2f868a27180e0_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:653cdc00e8cd62c3606c5680f550c45b72294ff711dd4fa84ed03180d836cfad_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:65813a1c96deb46ed24ae6ec32a41f381a58facacbb5ab953914298b80d27d73_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:baf0e909c2a0f3b516e2b4f7417f1557a73f7139480628b9efa487b419784d2e_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:d4e8c0cbc0691b961a28b670e61fb52941d99804f83a0e3f82c610e800369c08_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:21cd299b7438e018c4f3c9a0092df03f0c042c9cb40bf326056e02740fd2ccab_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:243badf894b3ecf3ae0e42447e8d4415644d865f01b292416819c0e4d969cec8_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:95d30d40d9cd98affa936cecb673fa0993721f25501fb975d7e7c126ecfa141c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:dea1282e383022fae2548eab7fcb110afc78276336311729711f200279cc636f_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:08ce19063089c5e2432394a730287e17d9aa680aad9c228ca8163a5c86de5283_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:19166f3323bf6cb6d86bc917960a452002e9d10e796228c564b400e7849fe164_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:dac798d7cd52804aa0fed81b8743d51a7f35a34a920067a44270ed866164688d_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:eea7078b27cbde48374b22f3c234d7b9cf40119a1e9d226ade575181eff11ec5_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:12040aec052e056cc93acb8d99b725c6ff518445b69e86971f60fe1460d3b80d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:3f7645c26cacd70cddf3ebf45410ab4e2fd7f34be1e0abf022361a1c486a8e0a_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:b16272547b35c5059b4954c2e75ef1aaae29f92576cfbf0a4fc6b870558ce085_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:ff4fe0dcbba51685739002ed8703822ae55b9fab6ce0f5bc5e1600b5ad53b474_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:0e76b0c1624bd3f7afc103028de41fad5df327f662eb92362243c933d53d7a5e_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:480e49c6ab2805182121f2204023cc35974b803ecbe8f5f6a1ce8b5c9940df9d_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:8a1cfb834027a80ed63f6baa04138c297b207129cbe2badb5288021ab2d01f9e_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:a546ff44cde478da177dccf2d3cc93667422297e6bf40923955f3ca9801e6319_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:007212c6697175cde671e7150b58b05b31f02641451998023ca867e868a5b393_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:4450f35880b8a42c3dfec603143c0ded87b94b68472efd074eaf850e09cb1949_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:648591fde25f36d752c6f7ba06224fb939f2f227273a13a5e14371147ac5a7f5_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:e3711929d6bc96143d385d0d95d0b7cd41ff2271b6be677ac59681c61e91e1a7_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:085f4b5bef40a152a53dab4032b8f86d00f19186e0e8cc44c43654172c7247e0_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:503dfe60277d2a1b378eec07e179928add2af1d968614f46756a47df11a58579_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:78cf27a0aa87e23ead38510b5f76b56053fd2fb19dd8dffef714106b035e66cc_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:baf3be5dd66c26b9295da4d9202e93fa1c718b5ac0700bb450acccbd57367082_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:7a4a38fb52698e0edb0426bdd5bd8eda86b08758548c22091301a6be10579fa3_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:9b92e13859d120c01c8776e7dbe9e56e9569351cdc7ccc53ac34f3e3034feae1_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:b915260ad68010ba87a875e45bf2a80f92da715b73a1f7277d4f1a40f348428c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:f07c731d554f88d8531de6981846e05b817bea2e3f254a0c7dc6a21ba51f8838_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:12e4d0feaa59c71d5e846dce888e17467a6922aa08a9c2971ae15a47604c8cc2_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:4e335af8d2fc8b8df96c1338a17fe2e32c51bd16229008ec66d40cc24187a8c6_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:878088c9089f2d9b9eda19edb88c6f11b65316dcdd0291049e357d7d6f5ba9b2_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:fc3ff82f0cf98d1e8031a0a53c4fc06d4783b668b8d22229fd0a13d74b3e3d84_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:0750bf5476cab8d10288afced3704b87d988e37575ee88cb9c5aeb3a117bbeaf_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:1626a744d4621b09beff3171eefef651b426172ebac25d5a5f9c4ccc4d5aae42_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:17b5bc347764f23b1e17bd990e0050a2934315211fa11642b1a206027a356a86_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:e7b4f3a3e5734de252d6214ec345479704c4fe7dcf3ed7bebe5a2a5166f00489_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:7cf2d4764244f9d24861c597939224dfad6935823bb5271279e9c1711390f782_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:c9c997790102efacb3e3001fc833cbb9c0e5d43aa506b499158a537af1cb7f84_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:d2a1bfaf4fe65ac2807409febecca76a1dfea376455c5c92cc9ebd6e43b3d6d9_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:e8edf62d6739397fa96c44c502c7ee64e0fe884a526d8d2b37ce39f04e3d8f39_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:5a18e28d9adc93f7429ee2aeddfed16beabb8ea777b568576f35c85579902a81_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:6e5abb4c408bdb38987e13f09d6a1699de40ef39243ac91a5731c48b377169b0_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:87b7771c1db5e931baf83d00528dc7b65e90c8828032741a5a1c37cbc4a300b8_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:94b9b25cba1fd560c6572ebde1cce9ea9c959ce31d2f02561e68ff7db580bdcf_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:533bd486273743daf1f023b3d77f0a151fe1e5c6f63f806588964a5bd1b6f1d6_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:6939f0ea8c418da6173f39771e7936f69cd3a244587d7c3cc736bf261ba39a34_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:cfe1245a29cc96306898ebde112a7cebce0865e5a977f8959e786022235a78a0_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:d7199aa13e57c289cfb7c163dcb6d08a01a5b54f750c8d792d302cf104126353_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:5ef4c37365b81ea9d4643a9200c587d438a78d24517d762b80908971fd75d9ab_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:6430213d3b92e23f1f77bba40e9e7d3d3a047c5988603148d6958bbb197393b3_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:797b4d4cab845e5544ca6544a2417578ad135ab38ed180a1f08bec45767e83c2_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:ba9e7533d69126ea08e4445566b637411cc73cd463a9ec6ff1f91b8c3441fbfd_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:21176a1983a9b934e8b8ad5ff1db86540883bb160e15a733b7ef4f6c11974da9_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:abad27dec9638ed160bce90a10facb04fdce91bcb2969470ffc8c436ac01de50_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:ca3c0b4e72dc9df0eb2626898a3b731b31c2503b9dc907a060defb902c708bf4_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:e2abe7d7c1a00c6b7911e6db28924f50640abfd88a99ade0690f5394a42e4fdc_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:0233c53a96cc685fc0d82596b84ab8a783ce7affba89dd85def7ad7eacf5bdfe_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:574420f56707cf437a81dc92ad5ec529d9e9c5a668dbd569b41becc7fde7e194_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:60e660bf0d066c3f799259e57000dcb1d7974753c49771d15361321353ebeb4a_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:bc80d85ced33bf5b7dc60d6d7555949c98cc4ee506d10ea5bb8a8691e58e8f42_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:6d72e8f7ae3d541d98cecbd49ec0442097b853cd183f16407795230357eeaaca_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:9577a704733f400f9c9782e6699d180e5a68bbccf44374f8b5e7e48cd2f2aba9_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:abc1f2c6256422a1ecf184a7a942540c365010c2ed07db7c9d96dd3ecb50cbe5_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:f4ddc5a0b88daa83b106e7b09cd57ceb1082f739a4007ad6702e585af73e75e5_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:080f4f2c2db999ee35e700f9090f8bd31cd8e3d345328899cde5406493208a28_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:78adef6bb83fd97673c8b5d4e889709bd1234a06cf2ee57703fe44500e0ff96c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:98dd1742832e1471100f2aecfe0dc6ac94916c790af0c2ea05ee846e841138b0_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:baa6ab272bef882a138529cc0a0accaaf18cc4a2b553d009b294a2d5a258721e_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:1ebe7d8d82749c71de1ac13bf94c8050bcac182918df254a3622215f8c6bc68f_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:62f9795ac0590dea90f9075d2d98e29714c5eca29b394933d79e94eec926ff8e_amd64	—	Workaround

Threats

Impact Moderate

CVE-2026-33154

A flaw was found in dynaconf, a Python configuration management tool. This Server-Side Template Injection (SSTI) vulnerability occurs due to unsafe template evaluation in the @Jinja resolver when the jinja2 package is installed. A remote attacker could exploit this by embedding malicious template expressions in configuration values, which are then processed without a sandboxed environment. This could lead to arbitrary code execution on the affected system.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-917 - Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:77ab5de9e627656bd9668724e2f59a37510a4905801edd183ecf380dcd9fe585_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:b37af6bef902e0eb955654296154355ed9941569929d2db7a22a595b0fa0162c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:c076cf5c0e56918bb49e8c353bc48265a9d88834934563259308cad15eb304e2_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:dfc798d88444141412d07492a1f426f083c6b7e3499db2f78abfeba0123c5821_s390x	—	Vendor Fix fix Workaround

Known not affected 110 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:3362761d6a5d99330d303adc87e1181369243147d56347362bfba62cc8047081_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:862cb4601db2eb288b72e993ed1c4b6bbb2e4dd37050d549ba86e6eafc3f1045_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:906f8d05d464820d7f46e9e3e437700adb70397eab300f2c0a2f281ee5322dfd_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:a9ec99ae45084783f79da5a8e41f42763b006489c84ffae0758ce12cea05948d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:9e37aeb2f8f5d89367c4c1415abbd66464aae126eda811f832a87c7fa1e914b0_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:a35e350ec5c0172601f25ac89fcbc48ff8c83ad2c5fdf798de917d9b046c9cc7_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:d833ed5b6de160d7e0cbf35cd5d7f93bfaa74acb2b12846ccc1eef41ef48074d_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:e81951b19451ffa56f4d44225c241229db250e2b87b0cf546d57506ad0911f41_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:443ed5ee0076c027a2af55183ce364225dce498e42fccdb259efd69ff412675f_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:b5424fd9f704ddf4ab272fc1629a64d3a658b9aa40c4dcfac58dd6ca51b48220_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:ccbd0249255d0fc1434a1c6fde96fbd6dc1059becefaa475d9cddd61dff0a970_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:fb3278021a45367ac357ed32872eb4e671844faad6b9eb9b08db0e476849bae4_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:17ed60234239a1b0b5081ae28b2a2a154ed79eaac34c0cf502c45bef6bb90c0a_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:754ad996d3fb66fffb7bfe0ee9289c9191b3ccecebd509ea99b3906f6f9e2208_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:a11554edb0f50083024b36f2dc13c5b6a60211a1ecaad30a78409a433512a705_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:f01ed355b061010f9584a77daad927f1ccca5097cc17e16823fdd2818508578b_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:08bef41a15e546deccf883d64ce525df7efd0511a5a52872f1e7486d3a4e0e75_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:1f03bd9054901f83e354a52bde14ad3e5ad8e556db128e22cf7ebe7a46ac7c44_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:76084c25d8de65c919ec760b8ddb9ae338da5cebe4b9ea03294c7b6466e0c3b6_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:c135bdbb6697bdfd4d711d71f70d915839c08057ba7aab7bf7117643f1f47bf8_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:01780af012f7fad2b3f8975e9a77a8e9d85913ac6869c60d94b9f7b0e71c4e41_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:12726676bf7f888bf49734aab1616046d8c3cef36cda5016de02cb09e36b51a5_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:6b5eac6cb840fc63462c7ba90f9119425b47abe39ce3a035c58aa1c24d20274e_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:72e638615fa4eccc23719eb2cc6892531508c41a2b3b80efcdcd34360d99b6e9_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:5cd20de178fd45b1775781a93e4e62bd61023175d5faf624ac8d8713fd7f8fe2_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:6be2a2d2a07c738c7ff04fbf4570a45d6c9a78c6d340e10e8a144461867b45d3_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:af8ef0d4d9e733370babbe0f6647d20d8f5fdc01349738a173803a7782bab2c1_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:e77be358fa816a3bc3dcb40fae651d317da03e6834049dc0c9b2f868a27180e0_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:653cdc00e8cd62c3606c5680f550c45b72294ff711dd4fa84ed03180d836cfad_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:65813a1c96deb46ed24ae6ec32a41f381a58facacbb5ab953914298b80d27d73_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:baf0e909c2a0f3b516e2b4f7417f1557a73f7139480628b9efa487b419784d2e_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:d4e8c0cbc0691b961a28b670e61fb52941d99804f83a0e3f82c610e800369c08_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:21cd299b7438e018c4f3c9a0092df03f0c042c9cb40bf326056e02740fd2ccab_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:243badf894b3ecf3ae0e42447e8d4415644d865f01b292416819c0e4d969cec8_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:95d30d40d9cd98affa936cecb673fa0993721f25501fb975d7e7c126ecfa141c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:dea1282e383022fae2548eab7fcb110afc78276336311729711f200279cc636f_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:08ce19063089c5e2432394a730287e17d9aa680aad9c228ca8163a5c86de5283_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:19166f3323bf6cb6d86bc917960a452002e9d10e796228c564b400e7849fe164_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:dac798d7cd52804aa0fed81b8743d51a7f35a34a920067a44270ed866164688d_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:eea7078b27cbde48374b22f3c234d7b9cf40119a1e9d226ade575181eff11ec5_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:12040aec052e056cc93acb8d99b725c6ff518445b69e86971f60fe1460d3b80d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:3f7645c26cacd70cddf3ebf45410ab4e2fd7f34be1e0abf022361a1c486a8e0a_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:b16272547b35c5059b4954c2e75ef1aaae29f92576cfbf0a4fc6b870558ce085_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:ff4fe0dcbba51685739002ed8703822ae55b9fab6ce0f5bc5e1600b5ad53b474_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:0e76b0c1624bd3f7afc103028de41fad5df327f662eb92362243c933d53d7a5e_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:480e49c6ab2805182121f2204023cc35974b803ecbe8f5f6a1ce8b5c9940df9d_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:8a1cfb834027a80ed63f6baa04138c297b207129cbe2badb5288021ab2d01f9e_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:a546ff44cde478da177dccf2d3cc93667422297e6bf40923955f3ca9801e6319_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:007212c6697175cde671e7150b58b05b31f02641451998023ca867e868a5b393_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:4450f35880b8a42c3dfec603143c0ded87b94b68472efd074eaf850e09cb1949_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:648591fde25f36d752c6f7ba06224fb939f2f227273a13a5e14371147ac5a7f5_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:e3711929d6bc96143d385d0d95d0b7cd41ff2271b6be677ac59681c61e91e1a7_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:085f4b5bef40a152a53dab4032b8f86d00f19186e0e8cc44c43654172c7247e0_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:503dfe60277d2a1b378eec07e179928add2af1d968614f46756a47df11a58579_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:78cf27a0aa87e23ead38510b5f76b56053fd2fb19dd8dffef714106b035e66cc_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:baf3be5dd66c26b9295da4d9202e93fa1c718b5ac0700bb450acccbd57367082_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:7a4a38fb52698e0edb0426bdd5bd8eda86b08758548c22091301a6be10579fa3_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:9b92e13859d120c01c8776e7dbe9e56e9569351cdc7ccc53ac34f3e3034feae1_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:b915260ad68010ba87a875e45bf2a80f92da715b73a1f7277d4f1a40f348428c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:f07c731d554f88d8531de6981846e05b817bea2e3f254a0c7dc6a21ba51f8838_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:12e4d0feaa59c71d5e846dce888e17467a6922aa08a9c2971ae15a47604c8cc2_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:4e335af8d2fc8b8df96c1338a17fe2e32c51bd16229008ec66d40cc24187a8c6_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:878088c9089f2d9b9eda19edb88c6f11b65316dcdd0291049e357d7d6f5ba9b2_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:fc3ff82f0cf98d1e8031a0a53c4fc06d4783b668b8d22229fd0a13d74b3e3d84_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:0750bf5476cab8d10288afced3704b87d988e37575ee88cb9c5aeb3a117bbeaf_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:1626a744d4621b09beff3171eefef651b426172ebac25d5a5f9c4ccc4d5aae42_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:17b5bc347764f23b1e17bd990e0050a2934315211fa11642b1a206027a356a86_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:e7b4f3a3e5734de252d6214ec345479704c4fe7dcf3ed7bebe5a2a5166f00489_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:264726e334c529ad8a6e8f0fb1591cff3360fc57b9bfec4d937852e8c636547a_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:4f334f34591be73a659548d4f2f3f59bff8ba7e2c76863d9eb81ed67c3c78e75_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:c14363d97da2591ea16578d2825ac7841102bcd205f0d014bc04697257b9c907_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:e66798c501870aded1197e33098b181135d7465275f7b18969ac73846db2ae6b_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:7cf2d4764244f9d24861c597939224dfad6935823bb5271279e9c1711390f782_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:c9c997790102efacb3e3001fc833cbb9c0e5d43aa506b499158a537af1cb7f84_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:d2a1bfaf4fe65ac2807409febecca76a1dfea376455c5c92cc9ebd6e43b3d6d9_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:e8edf62d6739397fa96c44c502c7ee64e0fe884a526d8d2b37ce39f04e3d8f39_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:5a18e28d9adc93f7429ee2aeddfed16beabb8ea777b568576f35c85579902a81_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:6e5abb4c408bdb38987e13f09d6a1699de40ef39243ac91a5731c48b377169b0_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:87b7771c1db5e931baf83d00528dc7b65e90c8828032741a5a1c37cbc4a300b8_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:94b9b25cba1fd560c6572ebde1cce9ea9c959ce31d2f02561e68ff7db580bdcf_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:295002a40f4e50912d15e5e101306f2281be8dbf6440c4573d56098ad35745d5_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:93b09e8400609e2507c4909d446e00f709d3c1e1c2f5f18f0e9d83f215c5e7b6_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:b332d45519f1d5ea72c3e0ad5cfa2c182a8f9fbba682bd3a86734999e33519e4_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:bb17450a5a8ff1ff4b364523e0b19cd2913f560f10e0214a0405ee18d2a36fd1_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:533bd486273743daf1f023b3d77f0a151fe1e5c6f63f806588964a5bd1b6f1d6_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:6939f0ea8c418da6173f39771e7936f69cd3a244587d7c3cc736bf261ba39a34_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:cfe1245a29cc96306898ebde112a7cebce0865e5a977f8959e786022235a78a0_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:d7199aa13e57c289cfb7c163dcb6d08a01a5b54f750c8d792d302cf104126353_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:5ef4c37365b81ea9d4643a9200c587d438a78d24517d762b80908971fd75d9ab_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:6430213d3b92e23f1f77bba40e9e7d3d3a047c5988603148d6958bbb197393b3_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:797b4d4cab845e5544ca6544a2417578ad135ab38ed180a1f08bec45767e83c2_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:ba9e7533d69126ea08e4445566b637411cc73cd463a9ec6ff1f91b8c3441fbfd_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:21176a1983a9b934e8b8ad5ff1db86540883bb160e15a733b7ef4f6c11974da9_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:abad27dec9638ed160bce90a10facb04fdce91bcb2969470ffc8c436ac01de50_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:ca3c0b4e72dc9df0eb2626898a3b731b31c2503b9dc907a060defb902c708bf4_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:e2abe7d7c1a00c6b7911e6db28924f50640abfd88a99ade0690f5394a42e4fdc_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:0233c53a96cc685fc0d82596b84ab8a783ce7affba89dd85def7ad7eacf5bdfe_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:574420f56707cf437a81dc92ad5ec529d9e9c5a668dbd569b41becc7fde7e194_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:60e660bf0d066c3f799259e57000dcb1d7974753c49771d15361321353ebeb4a_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:bc80d85ced33bf5b7dc60d6d7555949c98cc4ee506d10ea5bb8a8691e58e8f42_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:6d72e8f7ae3d541d98cecbd49ec0442097b853cd183f16407795230357eeaaca_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:9577a704733f400f9c9782e6699d180e5a68bbccf44374f8b5e7e48cd2f2aba9_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:abc1f2c6256422a1ecf184a7a942540c365010c2ed07db7c9d96dd3ecb50cbe5_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:f4ddc5a0b88daa83b106e7b09cd57ceb1082f739a4007ad6702e585af73e75e5_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:080f4f2c2db999ee35e700f9090f8bd31cd8e3d345328899cde5406493208a28_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:78adef6bb83fd97673c8b5d4e889709bd1234a06cf2ee57703fe44500e0ff96c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:98dd1742832e1471100f2aecfe0dc6ac94916c790af0c2ea05ee846e841138b0_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:baa6ab272bef882a138529cc0a0accaaf18cc4a2b553d009b294a2d5a258721e_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:1ebe7d8d82749c71de1ac13bf94c8050bcac182918df254a3622215f8c6bc68f_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:62f9795ac0590dea90f9075d2d98e29714c5eca29b394933d79e94eec926ff8e_amd64	—	Workaround

Threats

Impact Moderate

CVE-2026-39363

A flaw was found in Vite, a frontend tooling framework. A remote attacker can exploit this vulnerability by connecting to the Vite development server's WebSocket without an Origin header. This allows the attacker to invoke the fetchModule function, enabling them to retrieve the contents of arbitrary files on the server. This information disclosure can lead to unauthorized access to sensitive data.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-1220 - Insufficient Granularity of Access Control

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:0233c53a96cc685fc0d82596b84ab8a783ce7affba89dd85def7ad7eacf5bdfe_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:574420f56707cf437a81dc92ad5ec529d9e9c5a668dbd569b41becc7fde7e194_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:60e660bf0d066c3f799259e57000dcb1d7974753c49771d15361321353ebeb4a_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:bc80d85ced33bf5b7dc60d6d7555949c98cc4ee506d10ea5bb8a8691e58e8f42_arm64	—	Vendor Fix fix Workaround

Known not affected 110 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:3362761d6a5d99330d303adc87e1181369243147d56347362bfba62cc8047081_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:862cb4601db2eb288b72e993ed1c4b6bbb2e4dd37050d549ba86e6eafc3f1045_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:906f8d05d464820d7f46e9e3e437700adb70397eab300f2c0a2f281ee5322dfd_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:a9ec99ae45084783f79da5a8e41f42763b006489c84ffae0758ce12cea05948d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:9e37aeb2f8f5d89367c4c1415abbd66464aae126eda811f832a87c7fa1e914b0_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:a35e350ec5c0172601f25ac89fcbc48ff8c83ad2c5fdf798de917d9b046c9cc7_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:d833ed5b6de160d7e0cbf35cd5d7f93bfaa74acb2b12846ccc1eef41ef48074d_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:e81951b19451ffa56f4d44225c241229db250e2b87b0cf546d57506ad0911f41_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:443ed5ee0076c027a2af55183ce364225dce498e42fccdb259efd69ff412675f_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:b5424fd9f704ddf4ab272fc1629a64d3a658b9aa40c4dcfac58dd6ca51b48220_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:ccbd0249255d0fc1434a1c6fde96fbd6dc1059becefaa475d9cddd61dff0a970_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:fb3278021a45367ac357ed32872eb4e671844faad6b9eb9b08db0e476849bae4_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:17ed60234239a1b0b5081ae28b2a2a154ed79eaac34c0cf502c45bef6bb90c0a_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:754ad996d3fb66fffb7bfe0ee9289c9191b3ccecebd509ea99b3906f6f9e2208_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:a11554edb0f50083024b36f2dc13c5b6a60211a1ecaad30a78409a433512a705_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:f01ed355b061010f9584a77daad927f1ccca5097cc17e16823fdd2818508578b_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:77ab5de9e627656bd9668724e2f59a37510a4905801edd183ecf380dcd9fe585_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:b37af6bef902e0eb955654296154355ed9941569929d2db7a22a595b0fa0162c_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:c076cf5c0e56918bb49e8c353bc48265a9d88834934563259308cad15eb304e2_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:dfc798d88444141412d07492a1f426f083c6b7e3499db2f78abfeba0123c5821_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:08bef41a15e546deccf883d64ce525df7efd0511a5a52872f1e7486d3a4e0e75_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:1f03bd9054901f83e354a52bde14ad3e5ad8e556db128e22cf7ebe7a46ac7c44_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:76084c25d8de65c919ec760b8ddb9ae338da5cebe4b9ea03294c7b6466e0c3b6_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:c135bdbb6697bdfd4d711d71f70d915839c08057ba7aab7bf7117643f1f47bf8_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:01780af012f7fad2b3f8975e9a77a8e9d85913ac6869c60d94b9f7b0e71c4e41_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:12726676bf7f888bf49734aab1616046d8c3cef36cda5016de02cb09e36b51a5_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:6b5eac6cb840fc63462c7ba90f9119425b47abe39ce3a035c58aa1c24d20274e_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:72e638615fa4eccc23719eb2cc6892531508c41a2b3b80efcdcd34360d99b6e9_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:5cd20de178fd45b1775781a93e4e62bd61023175d5faf624ac8d8713fd7f8fe2_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:6be2a2d2a07c738c7ff04fbf4570a45d6c9a78c6d340e10e8a144461867b45d3_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:af8ef0d4d9e733370babbe0f6647d20d8f5fdc01349738a173803a7782bab2c1_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:e77be358fa816a3bc3dcb40fae651d317da03e6834049dc0c9b2f868a27180e0_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:653cdc00e8cd62c3606c5680f550c45b72294ff711dd4fa84ed03180d836cfad_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:65813a1c96deb46ed24ae6ec32a41f381a58facacbb5ab953914298b80d27d73_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:baf0e909c2a0f3b516e2b4f7417f1557a73f7139480628b9efa487b419784d2e_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:d4e8c0cbc0691b961a28b670e61fb52941d99804f83a0e3f82c610e800369c08_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:21cd299b7438e018c4f3c9a0092df03f0c042c9cb40bf326056e02740fd2ccab_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:243badf894b3ecf3ae0e42447e8d4415644d865f01b292416819c0e4d969cec8_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:95d30d40d9cd98affa936cecb673fa0993721f25501fb975d7e7c126ecfa141c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:dea1282e383022fae2548eab7fcb110afc78276336311729711f200279cc636f_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:08ce19063089c5e2432394a730287e17d9aa680aad9c228ca8163a5c86de5283_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:19166f3323bf6cb6d86bc917960a452002e9d10e796228c564b400e7849fe164_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:dac798d7cd52804aa0fed81b8743d51a7f35a34a920067a44270ed866164688d_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:eea7078b27cbde48374b22f3c234d7b9cf40119a1e9d226ade575181eff11ec5_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:12040aec052e056cc93acb8d99b725c6ff518445b69e86971f60fe1460d3b80d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:3f7645c26cacd70cddf3ebf45410ab4e2fd7f34be1e0abf022361a1c486a8e0a_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:b16272547b35c5059b4954c2e75ef1aaae29f92576cfbf0a4fc6b870558ce085_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:ff4fe0dcbba51685739002ed8703822ae55b9fab6ce0f5bc5e1600b5ad53b474_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:0e76b0c1624bd3f7afc103028de41fad5df327f662eb92362243c933d53d7a5e_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:480e49c6ab2805182121f2204023cc35974b803ecbe8f5f6a1ce8b5c9940df9d_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:8a1cfb834027a80ed63f6baa04138c297b207129cbe2badb5288021ab2d01f9e_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:a546ff44cde478da177dccf2d3cc93667422297e6bf40923955f3ca9801e6319_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:007212c6697175cde671e7150b58b05b31f02641451998023ca867e868a5b393_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:4450f35880b8a42c3dfec603143c0ded87b94b68472efd074eaf850e09cb1949_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:648591fde25f36d752c6f7ba06224fb939f2f227273a13a5e14371147ac5a7f5_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:e3711929d6bc96143d385d0d95d0b7cd41ff2271b6be677ac59681c61e91e1a7_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:085f4b5bef40a152a53dab4032b8f86d00f19186e0e8cc44c43654172c7247e0_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:503dfe60277d2a1b378eec07e179928add2af1d968614f46756a47df11a58579_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:78cf27a0aa87e23ead38510b5f76b56053fd2fb19dd8dffef714106b035e66cc_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:baf3be5dd66c26b9295da4d9202e93fa1c718b5ac0700bb450acccbd57367082_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:7a4a38fb52698e0edb0426bdd5bd8eda86b08758548c22091301a6be10579fa3_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:9b92e13859d120c01c8776e7dbe9e56e9569351cdc7ccc53ac34f3e3034feae1_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:b915260ad68010ba87a875e45bf2a80f92da715b73a1f7277d4f1a40f348428c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:f07c731d554f88d8531de6981846e05b817bea2e3f254a0c7dc6a21ba51f8838_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:12e4d0feaa59c71d5e846dce888e17467a6922aa08a9c2971ae15a47604c8cc2_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:4e335af8d2fc8b8df96c1338a17fe2e32c51bd16229008ec66d40cc24187a8c6_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:878088c9089f2d9b9eda19edb88c6f11b65316dcdd0291049e357d7d6f5ba9b2_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:fc3ff82f0cf98d1e8031a0a53c4fc06d4783b668b8d22229fd0a13d74b3e3d84_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:0750bf5476cab8d10288afced3704b87d988e37575ee88cb9c5aeb3a117bbeaf_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:1626a744d4621b09beff3171eefef651b426172ebac25d5a5f9c4ccc4d5aae42_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:17b5bc347764f23b1e17bd990e0050a2934315211fa11642b1a206027a356a86_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:e7b4f3a3e5734de252d6214ec345479704c4fe7dcf3ed7bebe5a2a5166f00489_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:264726e334c529ad8a6e8f0fb1591cff3360fc57b9bfec4d937852e8c636547a_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:4f334f34591be73a659548d4f2f3f59bff8ba7e2c76863d9eb81ed67c3c78e75_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:c14363d97da2591ea16578d2825ac7841102bcd205f0d014bc04697257b9c907_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:e66798c501870aded1197e33098b181135d7465275f7b18969ac73846db2ae6b_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:7cf2d4764244f9d24861c597939224dfad6935823bb5271279e9c1711390f782_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:c9c997790102efacb3e3001fc833cbb9c0e5d43aa506b499158a537af1cb7f84_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:d2a1bfaf4fe65ac2807409febecca76a1dfea376455c5c92cc9ebd6e43b3d6d9_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:e8edf62d6739397fa96c44c502c7ee64e0fe884a526d8d2b37ce39f04e3d8f39_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:5a18e28d9adc93f7429ee2aeddfed16beabb8ea777b568576f35c85579902a81_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:6e5abb4c408bdb38987e13f09d6a1699de40ef39243ac91a5731c48b377169b0_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:87b7771c1db5e931baf83d00528dc7b65e90c8828032741a5a1c37cbc4a300b8_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:94b9b25cba1fd560c6572ebde1cce9ea9c959ce31d2f02561e68ff7db580bdcf_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:295002a40f4e50912d15e5e101306f2281be8dbf6440c4573d56098ad35745d5_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:93b09e8400609e2507c4909d446e00f709d3c1e1c2f5f18f0e9d83f215c5e7b6_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:b332d45519f1d5ea72c3e0ad5cfa2c182a8f9fbba682bd3a86734999e33519e4_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:bb17450a5a8ff1ff4b364523e0b19cd2913f560f10e0214a0405ee18d2a36fd1_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:533bd486273743daf1f023b3d77f0a151fe1e5c6f63f806588964a5bd1b6f1d6_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:6939f0ea8c418da6173f39771e7936f69cd3a244587d7c3cc736bf261ba39a34_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:cfe1245a29cc96306898ebde112a7cebce0865e5a977f8959e786022235a78a0_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:d7199aa13e57c289cfb7c163dcb6d08a01a5b54f750c8d792d302cf104126353_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:5ef4c37365b81ea9d4643a9200c587d438a78d24517d762b80908971fd75d9ab_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:6430213d3b92e23f1f77bba40e9e7d3d3a047c5988603148d6958bbb197393b3_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:797b4d4cab845e5544ca6544a2417578ad135ab38ed180a1f08bec45767e83c2_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:ba9e7533d69126ea08e4445566b637411cc73cd463a9ec6ff1f91b8c3441fbfd_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:21176a1983a9b934e8b8ad5ff1db86540883bb160e15a733b7ef4f6c11974da9_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:abad27dec9638ed160bce90a10facb04fdce91bcb2969470ffc8c436ac01de50_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:ca3c0b4e72dc9df0eb2626898a3b731b31c2503b9dc907a060defb902c708bf4_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:e2abe7d7c1a00c6b7911e6db28924f50640abfd88a99ade0690f5394a42e4fdc_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:6d72e8f7ae3d541d98cecbd49ec0442097b853cd183f16407795230357eeaaca_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:9577a704733f400f9c9782e6699d180e5a68bbccf44374f8b5e7e48cd2f2aba9_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:abc1f2c6256422a1ecf184a7a942540c365010c2ed07db7c9d96dd3ecb50cbe5_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:f4ddc5a0b88daa83b106e7b09cd57ceb1082f739a4007ad6702e585af73e75e5_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:080f4f2c2db999ee35e700f9090f8bd31cd8e3d345328899cde5406493208a28_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:78adef6bb83fd97673c8b5d4e889709bd1234a06cf2ee57703fe44500e0ff96c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:98dd1742832e1471100f2aecfe0dc6ac94916c790af0c2ea05ee846e841138b0_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:baa6ab272bef882a138529cc0a0accaaf18cc4a2b553d009b294a2d5a258721e_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:1ebe7d8d82749c71de1ac13bf94c8050bcac182918df254a3622215f8c6bc68f_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:62f9795ac0590dea90f9075d2d98e29714c5eca29b394933d79e94eec926ff8e_amd64	—	Workaround

Threats

Impact Important

CVE-2026-39364

A flaw was found in Vite, a frontend tooling framework for JavaScript. On the Vite development server, a remote attacker could exploit this vulnerability by appending specific query parameters, such as ?raw, to requests. This allows the attacker to bypass security restrictions and retrieve sensitive files, including environment variables (.env) and certificate files (*.crt), which should otherwise be blocked. This information disclosure could lead to further compromise of the system.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-472 - External Control of Assumed-Immutable Web Parameter

Affected products

Fixed 4 products, the same list as for CVE-2026-39363

Known not affected 110 products, the same list as for CVE-2026-39363

Threats

Impact Important

CVE-2026-39892

A flaw was found in the cryptography library. This vulnerability occurs when a non-contiguous buffer is passed to certain application programming interfaces (APIs) that accept Python buffers, such as Hash.update(). A remote attacker could exploit this to cause a buffer overflow, potentially leading to a denial of service.

7.3 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE-131 - Incorrect Calculation of Buffer Size

Affected products

Fixed 24 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:77ab5de9e627656bd9668724e2f59a37510a4905801edd183ecf380dcd9fe585_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:b37af6bef902e0eb955654296154355ed9941569929d2db7a22a595b0fa0162c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:c076cf5c0e56918bb49e8c353bc48265a9d88834934563259308cad15eb304e2_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:dfc798d88444141412d07492a1f426f083c6b7e3499db2f78abfeba0123c5821_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:653cdc00e8cd62c3606c5680f550c45b72294ff711dd4fa84ed03180d836cfad_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:65813a1c96deb46ed24ae6ec32a41f381a58facacbb5ab953914298b80d27d73_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:baf0e909c2a0f3b516e2b4f7417f1557a73f7139480628b9efa487b419784d2e_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:d4e8c0cbc0691b961a28b670e61fb52941d99804f83a0e3f82c610e800369c08_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:12040aec052e056cc93acb8d99b725c6ff518445b69e86971f60fe1460d3b80d_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:3f7645c26cacd70cddf3ebf45410ab4e2fd7f34be1e0abf022361a1c486a8e0a_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:b16272547b35c5059b4954c2e75ef1aaae29f92576cfbf0a4fc6b870558ce085_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:ff4fe0dcbba51685739002ed8703822ae55b9fab6ce0f5bc5e1600b5ad53b474_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:085f4b5bef40a152a53dab4032b8f86d00f19186e0e8cc44c43654172c7247e0_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:503dfe60277d2a1b378eec07e179928add2af1d968614f46756a47df11a58579_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:78cf27a0aa87e23ead38510b5f76b56053fd2fb19dd8dffef714106b035e66cc_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:baf3be5dd66c26b9295da4d9202e93fa1c718b5ac0700bb450acccbd57367082_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:12e4d0feaa59c71d5e846dce888e17467a6922aa08a9c2971ae15a47604c8cc2_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:4e335af8d2fc8b8df96c1338a17fe2e32c51bd16229008ec66d40cc24187a8c6_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:878088c9089f2d9b9eda19edb88c6f11b65316dcdd0291049e357d7d6f5ba9b2_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:fc3ff82f0cf98d1e8031a0a53c4fc06d4783b668b8d22229fd0a13d74b3e3d84_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:080f4f2c2db999ee35e700f9090f8bd31cd8e3d345328899cde5406493208a28_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:78adef6bb83fd97673c8b5d4e889709bd1234a06cf2ee57703fe44500e0ff96c_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:98dd1742832e1471100f2aecfe0dc6ac94916c790af0c2ea05ee846e841138b0_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:baa6ab272bef882a138529cc0a0accaaf18cc4a2b553d009b294a2d5a258721e_ppc64le	—	Vendor Fix fix Workaround

Known not affected 90 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:3362761d6a5d99330d303adc87e1181369243147d56347362bfba62cc8047081_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:862cb4601db2eb288b72e993ed1c4b6bbb2e4dd37050d549ba86e6eafc3f1045_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:906f8d05d464820d7f46e9e3e437700adb70397eab300f2c0a2f281ee5322dfd_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:a9ec99ae45084783f79da5a8e41f42763b006489c84ffae0758ce12cea05948d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:9e37aeb2f8f5d89367c4c1415abbd66464aae126eda811f832a87c7fa1e914b0_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:a35e350ec5c0172601f25ac89fcbc48ff8c83ad2c5fdf798de917d9b046c9cc7_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:d833ed5b6de160d7e0cbf35cd5d7f93bfaa74acb2b12846ccc1eef41ef48074d_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:e81951b19451ffa56f4d44225c241229db250e2b87b0cf546d57506ad0911f41_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:443ed5ee0076c027a2af55183ce364225dce498e42fccdb259efd69ff412675f_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:b5424fd9f704ddf4ab272fc1629a64d3a658b9aa40c4dcfac58dd6ca51b48220_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:ccbd0249255d0fc1434a1c6fde96fbd6dc1059becefaa475d9cddd61dff0a970_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:fb3278021a45367ac357ed32872eb4e671844faad6b9eb9b08db0e476849bae4_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:17ed60234239a1b0b5081ae28b2a2a154ed79eaac34c0cf502c45bef6bb90c0a_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:754ad996d3fb66fffb7bfe0ee9289c9191b3ccecebd509ea99b3906f6f9e2208_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:a11554edb0f50083024b36f2dc13c5b6a60211a1ecaad30a78409a433512a705_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:f01ed355b061010f9584a77daad927f1ccca5097cc17e16823fdd2818508578b_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:08bef41a15e546deccf883d64ce525df7efd0511a5a52872f1e7486d3a4e0e75_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:1f03bd9054901f83e354a52bde14ad3e5ad8e556db128e22cf7ebe7a46ac7c44_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:76084c25d8de65c919ec760b8ddb9ae338da5cebe4b9ea03294c7b6466e0c3b6_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:c135bdbb6697bdfd4d711d71f70d915839c08057ba7aab7bf7117643f1f47bf8_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:01780af012f7fad2b3f8975e9a77a8e9d85913ac6869c60d94b9f7b0e71c4e41_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:12726676bf7f888bf49734aab1616046d8c3cef36cda5016de02cb09e36b51a5_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:6b5eac6cb840fc63462c7ba90f9119425b47abe39ce3a035c58aa1c24d20274e_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:72e638615fa4eccc23719eb2cc6892531508c41a2b3b80efcdcd34360d99b6e9_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:5cd20de178fd45b1775781a93e4e62bd61023175d5faf624ac8d8713fd7f8fe2_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:6be2a2d2a07c738c7ff04fbf4570a45d6c9a78c6d340e10e8a144461867b45d3_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:af8ef0d4d9e733370babbe0f6647d20d8f5fdc01349738a173803a7782bab2c1_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:e77be358fa816a3bc3dcb40fae651d317da03e6834049dc0c9b2f868a27180e0_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:21cd299b7438e018c4f3c9a0092df03f0c042c9cb40bf326056e02740fd2ccab_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:243badf894b3ecf3ae0e42447e8d4415644d865f01b292416819c0e4d969cec8_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:95d30d40d9cd98affa936cecb673fa0993721f25501fb975d7e7c126ecfa141c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:dea1282e383022fae2548eab7fcb110afc78276336311729711f200279cc636f_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:08ce19063089c5e2432394a730287e17d9aa680aad9c228ca8163a5c86de5283_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:19166f3323bf6cb6d86bc917960a452002e9d10e796228c564b400e7849fe164_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:dac798d7cd52804aa0fed81b8743d51a7f35a34a920067a44270ed866164688d_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:eea7078b27cbde48374b22f3c234d7b9cf40119a1e9d226ade575181eff11ec5_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:0e76b0c1624bd3f7afc103028de41fad5df327f662eb92362243c933d53d7a5e_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:480e49c6ab2805182121f2204023cc35974b803ecbe8f5f6a1ce8b5c9940df9d_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:8a1cfb834027a80ed63f6baa04138c297b207129cbe2badb5288021ab2d01f9e_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:a546ff44cde478da177dccf2d3cc93667422297e6bf40923955f3ca9801e6319_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:007212c6697175cde671e7150b58b05b31f02641451998023ca867e868a5b393_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:4450f35880b8a42c3dfec603143c0ded87b94b68472efd074eaf850e09cb1949_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:648591fde25f36d752c6f7ba06224fb939f2f227273a13a5e14371147ac5a7f5_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:e3711929d6bc96143d385d0d95d0b7cd41ff2271b6be677ac59681c61e91e1a7_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:7a4a38fb52698e0edb0426bdd5bd8eda86b08758548c22091301a6be10579fa3_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:9b92e13859d120c01c8776e7dbe9e56e9569351cdc7ccc53ac34f3e3034feae1_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:b915260ad68010ba87a875e45bf2a80f92da715b73a1f7277d4f1a40f348428c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:f07c731d554f88d8531de6981846e05b817bea2e3f254a0c7dc6a21ba51f8838_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:0750bf5476cab8d10288afced3704b87d988e37575ee88cb9c5aeb3a117bbeaf_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:1626a744d4621b09beff3171eefef651b426172ebac25d5a5f9c4ccc4d5aae42_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:17b5bc347764f23b1e17bd990e0050a2934315211fa11642b1a206027a356a86_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:e7b4f3a3e5734de252d6214ec345479704c4fe7dcf3ed7bebe5a2a5166f00489_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:264726e334c529ad8a6e8f0fb1591cff3360fc57b9bfec4d937852e8c636547a_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:4f334f34591be73a659548d4f2f3f59bff8ba7e2c76863d9eb81ed67c3c78e75_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:c14363d97da2591ea16578d2825ac7841102bcd205f0d014bc04697257b9c907_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:e66798c501870aded1197e33098b181135d7465275f7b18969ac73846db2ae6b_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:7cf2d4764244f9d24861c597939224dfad6935823bb5271279e9c1711390f782_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:c9c997790102efacb3e3001fc833cbb9c0e5d43aa506b499158a537af1cb7f84_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:d2a1bfaf4fe65ac2807409febecca76a1dfea376455c5c92cc9ebd6e43b3d6d9_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:e8edf62d6739397fa96c44c502c7ee64e0fe884a526d8d2b37ce39f04e3d8f39_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:5a18e28d9adc93f7429ee2aeddfed16beabb8ea777b568576f35c85579902a81_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:6e5abb4c408bdb38987e13f09d6a1699de40ef39243ac91a5731c48b377169b0_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:87b7771c1db5e931baf83d00528dc7b65e90c8828032741a5a1c37cbc4a300b8_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:94b9b25cba1fd560c6572ebde1cce9ea9c959ce31d2f02561e68ff7db580bdcf_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:295002a40f4e50912d15e5e101306f2281be8dbf6440c4573d56098ad35745d5_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:93b09e8400609e2507c4909d446e00f709d3c1e1c2f5f18f0e9d83f215c5e7b6_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:b332d45519f1d5ea72c3e0ad5cfa2c182a8f9fbba682bd3a86734999e33519e4_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:bb17450a5a8ff1ff4b364523e0b19cd2913f560f10e0214a0405ee18d2a36fd1_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:533bd486273743daf1f023b3d77f0a151fe1e5c6f63f806588964a5bd1b6f1d6_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:6939f0ea8c418da6173f39771e7936f69cd3a244587d7c3cc736bf261ba39a34_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:cfe1245a29cc96306898ebde112a7cebce0865e5a977f8959e786022235a78a0_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:d7199aa13e57c289cfb7c163dcb6d08a01a5b54f750c8d792d302cf104126353_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:5ef4c37365b81ea9d4643a9200c587d438a78d24517d762b80908971fd75d9ab_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:6430213d3b92e23f1f77bba40e9e7d3d3a047c5988603148d6958bbb197393b3_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:797b4d4cab845e5544ca6544a2417578ad135ab38ed180a1f08bec45767e83c2_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:ba9e7533d69126ea08e4445566b637411cc73cd463a9ec6ff1f91b8c3441fbfd_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:21176a1983a9b934e8b8ad5ff1db86540883bb160e15a733b7ef4f6c11974da9_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:abad27dec9638ed160bce90a10facb04fdce91bcb2969470ffc8c436ac01de50_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:ca3c0b4e72dc9df0eb2626898a3b731b31c2503b9dc907a060defb902c708bf4_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:e2abe7d7c1a00c6b7911e6db28924f50640abfd88a99ade0690f5394a42e4fdc_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:0233c53a96cc685fc0d82596b84ab8a783ce7affba89dd85def7ad7eacf5bdfe_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:574420f56707cf437a81dc92ad5ec529d9e9c5a668dbd569b41becc7fde7e194_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:60e660bf0d066c3f799259e57000dcb1d7974753c49771d15361321353ebeb4a_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:bc80d85ced33bf5b7dc60d6d7555949c98cc4ee506d10ea5bb8a8691e58e8f42_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:6d72e8f7ae3d541d98cecbd49ec0442097b853cd183f16407795230357eeaaca_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:9577a704733f400f9c9782e6699d180e5a68bbccf44374f8b5e7e48cd2f2aba9_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:abc1f2c6256422a1ecf184a7a942540c365010c2ed07db7c9d96dd3ecb50cbe5_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:f4ddc5a0b88daa83b106e7b09cd57ceb1082f739a4007ad6702e585af73e75e5_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:1ebe7d8d82749c71de1ac13bf94c8050bcac182918df254a3622215f8c6bc68f_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:62f9795ac0590dea90f9075d2d98e29714c5eca29b394933d79e94eec926ff8e_amd64	—	Workaround

Threats

Impact Important

CVE-2026-40192

A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to trigger a denial of service (DoS) by providing a specially crafted FITS image file. The library's failure to limit the amount of GZIP-compressed data during decoding can lead to unbounded memory consumption, causing the system to crash or experience severe performance issues.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:12e4d0feaa59c71d5e846dce888e17467a6922aa08a9c2971ae15a47604c8cc2_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:4e335af8d2fc8b8df96c1338a17fe2e32c51bd16229008ec66d40cc24187a8c6_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:878088c9089f2d9b9eda19edb88c6f11b65316dcdd0291049e357d7d6f5ba9b2_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:fc3ff82f0cf98d1e8031a0a53c4fc06d4783b668b8d22229fd0a13d74b3e3d84_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:264726e334c529ad8a6e8f0fb1591cff3360fc57b9bfec4d937852e8c636547a_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:4f334f34591be73a659548d4f2f3f59bff8ba7e2c76863d9eb81ed67c3c78e75_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:c14363d97da2591ea16578d2825ac7841102bcd205f0d014bc04697257b9c907_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:e66798c501870aded1197e33098b181135d7465275f7b18969ac73846db2ae6b_amd64	—	Vendor Fix fix Workaround

Known not affected 106 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:3362761d6a5d99330d303adc87e1181369243147d56347362bfba62cc8047081_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:862cb4601db2eb288b72e993ed1c4b6bbb2e4dd37050d549ba86e6eafc3f1045_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:906f8d05d464820d7f46e9e3e437700adb70397eab300f2c0a2f281ee5322dfd_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:a9ec99ae45084783f79da5a8e41f42763b006489c84ffae0758ce12cea05948d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:9e37aeb2f8f5d89367c4c1415abbd66464aae126eda811f832a87c7fa1e914b0_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:a35e350ec5c0172601f25ac89fcbc48ff8c83ad2c5fdf798de917d9b046c9cc7_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:d833ed5b6de160d7e0cbf35cd5d7f93bfaa74acb2b12846ccc1eef41ef48074d_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:e81951b19451ffa56f4d44225c241229db250e2b87b0cf546d57506ad0911f41_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:443ed5ee0076c027a2af55183ce364225dce498e42fccdb259efd69ff412675f_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:b5424fd9f704ddf4ab272fc1629a64d3a658b9aa40c4dcfac58dd6ca51b48220_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:ccbd0249255d0fc1434a1c6fde96fbd6dc1059becefaa475d9cddd61dff0a970_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:fb3278021a45367ac357ed32872eb4e671844faad6b9eb9b08db0e476849bae4_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:17ed60234239a1b0b5081ae28b2a2a154ed79eaac34c0cf502c45bef6bb90c0a_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:754ad996d3fb66fffb7bfe0ee9289c9191b3ccecebd509ea99b3906f6f9e2208_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:a11554edb0f50083024b36f2dc13c5b6a60211a1ecaad30a78409a433512a705_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:f01ed355b061010f9584a77daad927f1ccca5097cc17e16823fdd2818508578b_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:77ab5de9e627656bd9668724e2f59a37510a4905801edd183ecf380dcd9fe585_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:b37af6bef902e0eb955654296154355ed9941569929d2db7a22a595b0fa0162c_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:c076cf5c0e56918bb49e8c353bc48265a9d88834934563259308cad15eb304e2_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:dfc798d88444141412d07492a1f426f083c6b7e3499db2f78abfeba0123c5821_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:08bef41a15e546deccf883d64ce525df7efd0511a5a52872f1e7486d3a4e0e75_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:1f03bd9054901f83e354a52bde14ad3e5ad8e556db128e22cf7ebe7a46ac7c44_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:76084c25d8de65c919ec760b8ddb9ae338da5cebe4b9ea03294c7b6466e0c3b6_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:c135bdbb6697bdfd4d711d71f70d915839c08057ba7aab7bf7117643f1f47bf8_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:01780af012f7fad2b3f8975e9a77a8e9d85913ac6869c60d94b9f7b0e71c4e41_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:12726676bf7f888bf49734aab1616046d8c3cef36cda5016de02cb09e36b51a5_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:6b5eac6cb840fc63462c7ba90f9119425b47abe39ce3a035c58aa1c24d20274e_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:72e638615fa4eccc23719eb2cc6892531508c41a2b3b80efcdcd34360d99b6e9_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:5cd20de178fd45b1775781a93e4e62bd61023175d5faf624ac8d8713fd7f8fe2_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:6be2a2d2a07c738c7ff04fbf4570a45d6c9a78c6d340e10e8a144461867b45d3_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:af8ef0d4d9e733370babbe0f6647d20d8f5fdc01349738a173803a7782bab2c1_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:e77be358fa816a3bc3dcb40fae651d317da03e6834049dc0c9b2f868a27180e0_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:653cdc00e8cd62c3606c5680f550c45b72294ff711dd4fa84ed03180d836cfad_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:65813a1c96deb46ed24ae6ec32a41f381a58facacbb5ab953914298b80d27d73_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:baf0e909c2a0f3b516e2b4f7417f1557a73f7139480628b9efa487b419784d2e_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:d4e8c0cbc0691b961a28b670e61fb52941d99804f83a0e3f82c610e800369c08_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:21cd299b7438e018c4f3c9a0092df03f0c042c9cb40bf326056e02740fd2ccab_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:243badf894b3ecf3ae0e42447e8d4415644d865f01b292416819c0e4d969cec8_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:95d30d40d9cd98affa936cecb673fa0993721f25501fb975d7e7c126ecfa141c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:dea1282e383022fae2548eab7fcb110afc78276336311729711f200279cc636f_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:08ce19063089c5e2432394a730287e17d9aa680aad9c228ca8163a5c86de5283_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:19166f3323bf6cb6d86bc917960a452002e9d10e796228c564b400e7849fe164_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:dac798d7cd52804aa0fed81b8743d51a7f35a34a920067a44270ed866164688d_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:eea7078b27cbde48374b22f3c234d7b9cf40119a1e9d226ade575181eff11ec5_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:12040aec052e056cc93acb8d99b725c6ff518445b69e86971f60fe1460d3b80d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:3f7645c26cacd70cddf3ebf45410ab4e2fd7f34be1e0abf022361a1c486a8e0a_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:b16272547b35c5059b4954c2e75ef1aaae29f92576cfbf0a4fc6b870558ce085_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:ff4fe0dcbba51685739002ed8703822ae55b9fab6ce0f5bc5e1600b5ad53b474_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:0e76b0c1624bd3f7afc103028de41fad5df327f662eb92362243c933d53d7a5e_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:480e49c6ab2805182121f2204023cc35974b803ecbe8f5f6a1ce8b5c9940df9d_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:8a1cfb834027a80ed63f6baa04138c297b207129cbe2badb5288021ab2d01f9e_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:a546ff44cde478da177dccf2d3cc93667422297e6bf40923955f3ca9801e6319_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:007212c6697175cde671e7150b58b05b31f02641451998023ca867e868a5b393_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:4450f35880b8a42c3dfec603143c0ded87b94b68472efd074eaf850e09cb1949_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:648591fde25f36d752c6f7ba06224fb939f2f227273a13a5e14371147ac5a7f5_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:e3711929d6bc96143d385d0d95d0b7cd41ff2271b6be677ac59681c61e91e1a7_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:085f4b5bef40a152a53dab4032b8f86d00f19186e0e8cc44c43654172c7247e0_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:503dfe60277d2a1b378eec07e179928add2af1d968614f46756a47df11a58579_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:78cf27a0aa87e23ead38510b5f76b56053fd2fb19dd8dffef714106b035e66cc_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:baf3be5dd66c26b9295da4d9202e93fa1c718b5ac0700bb450acccbd57367082_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:7a4a38fb52698e0edb0426bdd5bd8eda86b08758548c22091301a6be10579fa3_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:9b92e13859d120c01c8776e7dbe9e56e9569351cdc7ccc53ac34f3e3034feae1_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:b915260ad68010ba87a875e45bf2a80f92da715b73a1f7277d4f1a40f348428c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:f07c731d554f88d8531de6981846e05b817bea2e3f254a0c7dc6a21ba51f8838_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:0750bf5476cab8d10288afced3704b87d988e37575ee88cb9c5aeb3a117bbeaf_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:1626a744d4621b09beff3171eefef651b426172ebac25d5a5f9c4ccc4d5aae42_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:17b5bc347764f23b1e17bd990e0050a2934315211fa11642b1a206027a356a86_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:e7b4f3a3e5734de252d6214ec345479704c4fe7dcf3ed7bebe5a2a5166f00489_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:7cf2d4764244f9d24861c597939224dfad6935823bb5271279e9c1711390f782_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:c9c997790102efacb3e3001fc833cbb9c0e5d43aa506b499158a537af1cb7f84_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:d2a1bfaf4fe65ac2807409febecca76a1dfea376455c5c92cc9ebd6e43b3d6d9_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:e8edf62d6739397fa96c44c502c7ee64e0fe884a526d8d2b37ce39f04e3d8f39_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:5a18e28d9adc93f7429ee2aeddfed16beabb8ea777b568576f35c85579902a81_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:6e5abb4c408bdb38987e13f09d6a1699de40ef39243ac91a5731c48b377169b0_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:87b7771c1db5e931baf83d00528dc7b65e90c8828032741a5a1c37cbc4a300b8_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:94b9b25cba1fd560c6572ebde1cce9ea9c959ce31d2f02561e68ff7db580bdcf_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:295002a40f4e50912d15e5e101306f2281be8dbf6440c4573d56098ad35745d5_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:93b09e8400609e2507c4909d446e00f709d3c1e1c2f5f18f0e9d83f215c5e7b6_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:b332d45519f1d5ea72c3e0ad5cfa2c182a8f9fbba682bd3a86734999e33519e4_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:bb17450a5a8ff1ff4b364523e0b19cd2913f560f10e0214a0405ee18d2a36fd1_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:533bd486273743daf1f023b3d77f0a151fe1e5c6f63f806588964a5bd1b6f1d6_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:6939f0ea8c418da6173f39771e7936f69cd3a244587d7c3cc736bf261ba39a34_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:cfe1245a29cc96306898ebde112a7cebce0865e5a977f8959e786022235a78a0_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:d7199aa13e57c289cfb7c163dcb6d08a01a5b54f750c8d792d302cf104126353_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:5ef4c37365b81ea9d4643a9200c587d438a78d24517d762b80908971fd75d9ab_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:6430213d3b92e23f1f77bba40e9e7d3d3a047c5988603148d6958bbb197393b3_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:797b4d4cab845e5544ca6544a2417578ad135ab38ed180a1f08bec45767e83c2_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:ba9e7533d69126ea08e4445566b637411cc73cd463a9ec6ff1f91b8c3441fbfd_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:21176a1983a9b934e8b8ad5ff1db86540883bb160e15a733b7ef4f6c11974da9_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:abad27dec9638ed160bce90a10facb04fdce91bcb2969470ffc8c436ac01de50_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:ca3c0b4e72dc9df0eb2626898a3b731b31c2503b9dc907a060defb902c708bf4_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:e2abe7d7c1a00c6b7911e6db28924f50640abfd88a99ade0690f5394a42e4fdc_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:0233c53a96cc685fc0d82596b84ab8a783ce7affba89dd85def7ad7eacf5bdfe_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:574420f56707cf437a81dc92ad5ec529d9e9c5a668dbd569b41becc7fde7e194_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:60e660bf0d066c3f799259e57000dcb1d7974753c49771d15361321353ebeb4a_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:bc80d85ced33bf5b7dc60d6d7555949c98cc4ee506d10ea5bb8a8691e58e8f42_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:6d72e8f7ae3d541d98cecbd49ec0442097b853cd183f16407795230357eeaaca_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:9577a704733f400f9c9782e6699d180e5a68bbccf44374f8b5e7e48cd2f2aba9_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:abc1f2c6256422a1ecf184a7a942540c365010c2ed07db7c9d96dd3ecb50cbe5_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:f4ddc5a0b88daa83b106e7b09cd57ceb1082f739a4007ad6702e585af73e75e5_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:080f4f2c2db999ee35e700f9090f8bd31cd8e3d345328899cde5406493208a28_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:78adef6bb83fd97673c8b5d4e889709bd1234a06cf2ee57703fe44500e0ff96c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:98dd1742832e1471100f2aecfe0dc6ac94916c790af0c2ea05ee846e841138b0_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:baa6ab272bef882a138529cc0a0accaaf18cc4a2b553d009b294a2d5a258721e_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:1ebe7d8d82749c71de1ac13bf94c8050bcac182918df254a3622215f8c6bc68f_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:62f9795ac0590dea90f9075d2d98e29714c5eca29b394933d79e94eec926ff8e_amd64	—	Workaround

Threats

Impact Important

CVE-2026-40217

A flaw was found in LiteLLM. A remote attacker can exploit this flaw by performing bytecode rewriting at the `/guardrails/test_custom_code` URI. This could lead to arbitrary code execution, allowing the attacker to run malicious code on the affected system.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Affected products

Fixed 4 products, the same list as for CVE-2026-23490

Known not affected 110 products, the same list as for CVE-2026-23490

Threats

Impact Important

CVE-2026-41140

A flaw was found in Poetry, a dependency manager for Python. This vulnerability allows a remote attacker to perform a path traversal attack. By crafting a malicious software package, the `extractall()` function in Poetry can be tricked into writing files to unintended locations on the system. This could lead to the creation or overwrite of critical system files, potentially compromising the integrity of the system.

8.7 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 8 products, the same list as for CVE-2026-40192

Known not affected 106 products, the same list as for CVE-2026-40192

Threats

Impact Important

CVE-2026-48710

A flaw was found in Starlette, a lightweight ASGI (Asynchronous Server Gateway Interface) framework. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP `Host` request header. This malformed header could cause the `request.url` to be incorrectly reconstructed, leading to a discrepancy with the actual requested path. Consequently, security restrictions enforced by middleware and endpoints that rely on `request.url` for validation could be bypassed, potentially allowing unauthorized access or actions.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-1289 - Improper Validation of Unsafe Equivalence in Input

Affected products

Fixed 4 products, the same list as for CVE-2026-23490

Known not affected 110 products, the same list as for CVE-2026-23490

Threats

Exploit Status CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Impact Moderate

References

116 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:24866	self
https://access.redhat.com/security/cve/CVE-2025-62718	external
https://access.redhat.com/security/cve/CVE-2026-23490	external
https://access.redhat.com/security/cve/CVE-2026-28390	external
https://access.redhat.com/security/cve/CVE-2026-28684	external
https://access.redhat.com/security/cve/CVE-2026-33154	external
https://access.redhat.com/security/cve/CVE-2026-39363	external
https://access.redhat.com/security/cve/CVE-2026-39364	external
https://access.redhat.com/security/cve/CVE-2026-39892	external
https://access.redhat.com/security/cve/CVE-2026-40192	external
https://access.redhat.com/security/cve/CVE-2026-40217	external
https://access.redhat.com/security/cve/CVE-2026-41140	external
https://access.redhat.com/security/cve/CVE-2026-48710	external
https://access.redhat.com/security/cve/CVE-2026-4926	external
https://access.redhat.com/security/cve/CVE-2026-6321	external
https://access.redhat.com/security/updates/classi…	external
https://docs.redhat.com/en/documentation/red_hat_…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-62718	self
https://bugzilla.redhat.com/show_bug.cgi?id=2456913	external
https://www.cve.org/CVERecord?id=CVE-2025-62718	external
https://nvd.nist.gov/vuln/detail/CVE-2025-62718	external
https://datatracker.ietf.org/doc/html/rfc1034#sec…	external
https://datatracker.ietf.org/doc/html/rfc3986#sec…	external
https://github.com/axios/axios/commit/fb3befb6daa…	external
https://github.com/axios/axios/pull/10661	external
https://github.com/axios/axios/releases/tag/v1.15.0	external
https://github.com/axios/axios/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-4926	self
https://bugzilla.redhat.com/show_bug.cgi?id=2451867	external
https://www.cve.org/CVERecord?id=CVE-2026-4926	external
https://nvd.nist.gov/vuln/detail/CVE-2026-4926	external
https://cna.openjsf.org/security-advisories.html	external
https://access.redhat.com/security/cve/CVE-2026-6321	self
https://bugzilla.redhat.com/show_bug.cgi?id=2466582	external
https://www.cve.org/CVERecord?id=CVE-2026-6321	external
https://nvd.nist.gov/vuln/detail/CVE-2026-6321	external
https://github.com/fastify/fast-uri/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-23490	self
https://bugzilla.redhat.com/show_bug.cgi?id=2430472	external
https://www.cve.org/CVERecord?id=CVE-2026-23490	external
https://nvd.nist.gov/vuln/detail/CVE-2026-23490	external
https://github.com/pyasn1/pyasn1/commit/3908f1442…	external
https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2	external
https://github.com/pyasn1/pyasn1/security/advisor…	external
https://access.redhat.com/security/cve/CVE-2026-28390	self
https://bugzilla.redhat.com/show_bug.cgi?id=2456314	external
https://www.cve.org/CVERecord?id=CVE-2026-28390	external
https://nvd.nist.gov/vuln/detail/CVE-2026-28390	external
https://github.com/openssl/openssl/commit/01194a8…	external
https://github.com/openssl/openssl/commit/2e39b7a…	external
https://github.com/openssl/openssl/commit/af2a5fe…	external
https://github.com/openssl/openssl/commit/ea7b4ea…	external
https://github.com/openssl/openssl/commit/fd2f1a6…	external
https://openssl-library.org/news/secadv/20260407.txt	external
https://access.redhat.com/security/cve/CVE-2026-28684	self
https://bugzilla.redhat.com/show_bug.cgi?id=2459798	external
https://www.cve.org/CVERecord?id=CVE-2026-28684	external
https://nvd.nist.gov/vuln/detail/CVE-2026-28684	external
https://github.com/theskumar/python-dotenv/commit…	external
https://github.com/theskumar/python-dotenv/releas…	external
https://github.com/theskumar/python-dotenv/securi…	external
https://access.redhat.com/security/cve/CVE-2026-33154	self
https://bugzilla.redhat.com/show_bug.cgi?id=2449774	external
https://www.cve.org/CVERecord?id=CVE-2026-33154	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33154	external
https://github.com/dynaconf/dynaconf/commit/2fbb4…	external
https://github.com/dynaconf/dynaconf/releases/tag…	external
https://github.com/dynaconf/dynaconf/security/adv…	external
https://access.redhat.com/security/cve/CVE-2026-39363	self
https://bugzilla.redhat.com/show_bug.cgi?id=2456179	external
https://www.cve.org/CVERecord?id=CVE-2026-39363	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39363	external
https://github.com/vitejs/vite/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-39364	self
https://bugzilla.redhat.com/show_bug.cgi?id=2456181	external
https://www.cve.org/CVERecord?id=CVE-2026-39364	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39364	external
https://github.com/vitejs/vite/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-39892	self
https://bugzilla.redhat.com/show_bug.cgi?id=2456735	external
https://www.cve.org/CVERecord?id=CVE-2026-39892	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39892	external
http://www.openwall.com/lists/oss-security/2026/0…	external
https://github.com/pyca/cryptography/commit/622d6…	external
https://github.com/pyca/cryptography/security/adv…	external
https://access.redhat.com/security/cve/CVE-2026-40192	self
https://bugzilla.redhat.com/show_bug.cgi?id=2458856	external
https://www.cve.org/CVERecord?id=CVE-2026-40192	external
https://nvd.nist.gov/vuln/detail/CVE-2026-40192	external
https://github.com/python-pillow/Pillow/commit/3c…	external
https://github.com/python-pillow/Pillow/pull/9521	external
https://github.com/python-pillow/Pillow/security/…	external
https://pillow.readthedocs.io/en/stable/releaseno…	external
https://access.redhat.com/security/cve/CVE-2026-40217	self
https://bugzilla.redhat.com/show_bug.cgi?id=2457301	external
https://www.cve.org/CVERecord?id=CVE-2026-40217	external
https://nvd.nist.gov/vuln/detail/CVE-2026-40217	external
https://www.x41-dsec.de/lab/advisories/x41-2026-0…	external
https://access.redhat.com/security/cve/CVE-2026-41140	self
https://bugzilla.redhat.com/show_bug.cgi?id=2461604	external
https://www.cve.org/CVERecord?id=CVE-2026-41140	external
https://nvd.nist.gov/vuln/detail/CVE-2026-41140	external
https://github.com/python-poetry/poetry/security/…	external
https://access.redhat.com/security/cve/CVE-2026-48710	self
https://bugzilla.redhat.com/show_bug.cgi?id=2481742	external
https://www.cve.org/CVERecord?id=CVE-2026-48710	external
https://nvd.nist.gov/vuln/detail/CVE-2026-48710	external
https://badhost.org	external
https://github.com/Kludex/starlette/commit/764dab…	external
https://github.com/Kludex/starlette/security/advi…	external
https://github.com/pypa/advisory-database/tree/ma…	external
https://ostif.org/disclosing-the-badhost-vulnerab…	external
https://www.secwest.net/starlette	external
https://www.x41-dsec.de/lab/advisories/x41-2026-0…	external
https://www.cisa.gov/known-exploited-vulnerabilit…	external

JSON

To clipboard

Loading 1.5 MB of JSON…

CVE-2026-41140 (GCVE-0-2026-41140)

Vulnerability from cvelistv5 – Published: 2026-04-24 17:10 – Updated: 2026-07-15 00:59

Title

Poetry: Path traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4

Summary

Poetry is a dependency manager for Python. Prior to 2.3.4, the extractall() function in src/poetry/utils/helpers.py:410-426 extracts sdist tarballs without path traversal protection on Python versions where tarfile.data_filter is unavailable. Considering only Python versions which are still supported by Poetry, these are 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4. This vulnerability is fixed in 2.3.4.

Severity

0.6 (Low)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U

8.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-24 18:02 UTC

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

GitHub_M mitre root

References

5 references

URL	Tags
https://github.com/python-poetry/poetry/security/…	x_refsource_CONFIRM
https://access.redhat.com/security/cve/CVE-2026-41140	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2461604	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:24866	vendor-advisoryx_refsource_REDHAT

Impacted products

7 products

Vendor	Product	Version
python-poetry	poetry	Affected: < 2.3.4
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1779761061 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1780102732 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-41140",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-24T18:02:54.197900Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-24T18:03:02.013Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-26/hub-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779761061",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-26/lightspeed-chatbot-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780102732",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-26/controller-rhel9",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ansible-automation-platform-26/eda-controller-rhel9",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-kserve-agent-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-kserve-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-kserve-router-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-kserve-storage-initializer-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "poetry",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python-poetry",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-04-24T17:10:33.869Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in Poetry, a dependency manager for Python. This vulnerability allows a remote attacker to perform a path traversal attack. By crafting a malicious software package, the `extractall()` function in Poetry can be tricked into writing files to unintended locations on the system. This could lead to the creation or overwrite of critical system files, potentially compromising the integrity of the system."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.7,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-22",
                "description": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-15T00:59:56.835Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-41140"
          },
          {
            "name": "RHBZ#2461604",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461604"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41140.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24866"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:24866: Red Hat Ansible Automation Platform 2.6"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-04-24T18:01:10.709Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-04-24T17:10:33.869Z",
            "value": "Made public."
          }
        ],
        "title": "poetry: Poetry: Path traversal vulnerability allows arbitrary file write via malicious package extraction",
        "workarounds": [
          {
            "lang": "en",
            "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "poetry",
          "vendor": "python-poetry",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 2.3.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Poetry is a dependency manager for Python. Prior to 2.3.4, the extractall() function in src/poetry/utils/helpers.py:410-426 extracts sdist tarballs without path traversal protection on Python versions where tarfile.data_filter is unavailable. Considering only Python versions which are still supported by Poetry, these are 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4. This vulnerability is fixed in 2.3.4."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 0.6,
            "baseSeverity": "LOW",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-24T17:10:33.869Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/python-poetry/poetry/security/advisories/GHSA-73h3-mf4w-8647",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/python-poetry/poetry/security/advisories/GHSA-73h3-mf4w-8647"
        }
      ],
      "source": {
        "advisory": "GHSA-73h3-mf4w-8647",
        "discovery": "UNKNOWN"
      },
      "title": "Poetry: Path traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-41140",
    "datePublished": "2026-04-24T17:10:33.869Z",
    "dateReserved": "2026-04-17T12:59:15.738Z",
    "dateUpdated": "2026-07-15T00:59:56.835Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-48710 (GCVE-0-2026-48710)

Vulnerability from cvelistv5 – Published: 2026-05-26 21:54 – Updated: 2026-09-04 12:05

Title

Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks

Summary

Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to reconstruct `request.url`. Because the routing algorithm relies on the raw HTTP path while `request.url` is rebuilt from the `Host` header, a malformed header could make `request.url.path` differ from the path that was actually requested. Middleware and endpoints that apply security restrictions based on `request.url` (rather than the raw `scope` path) could therefore be bypassed. Users should upgrade to a version greater than or equal to version 1.0.1, which validates the `Host` header against the grammar of RFC 9112 §3.2 / RFC 3986 §3.2.2 when constructing `request.url` and falls back to `scope["server"]` for malformed values.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

SSVC

Exploitation: active Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-02 00:00 UTC

CWE

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CWE-1289 - Improper Validation of Unsafe Equivalence in Input

Assigner

GitHub_M mitre root

References

29 references

URL	Tags
https://github.com/Kludex/starlette/security/advi…	x_refsource_CONFIRM
https://github.com/Kludex/starlette/commit/764dab…	x_refsource_MISC
https://badhost.org	x_refsource_MISC
https://github.com/pypa/advisory-database/tree/ma…	x_refsource_MISC
https://ostif.org/disclosing-the-badhost-vulnerab…	x_refsource_MISC
https://www.secwest.net/starlette	x_refsource_MISC
https://www.x41-dsec.de/lab/advisories/x41-2026-0…	x_refsource_MISC
https:/www.microsoft.com/en-us/security/blog/2026…	third-party-advisory
https://www.wiz.io/blog/ai-infrastructure-honeypot	third-party-advisory
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource
https://access.redhat.com/security/cve/CVE-2026-48710	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2481742	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:30089	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30088	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24866	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23346	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43038	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37275	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60520	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34456	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:44696	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22993	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26226	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51357	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22992	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34532	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34526	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:63337	vendor-advisoryx_refsource_REDHAT

Impacted products

52 products

Vendor	Product	Version
Kludex	starlette	Affected: < 1.0.1
Red Hat	Red Hat AI Inference Server 3.3	Unaffected: 1782353093 , < * (rpm) cpe:/a:redhat:ai_inference_server:3.3::el9
Red Hat	Red Hat AI Inference Server 3.3	Unaffected: 1782352847 , < * (rpm) cpe:/a:redhat:ai_inference_server:3.3::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1780102732 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.7	Unaffected: 1780099185 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el9
Red Hat	Red Hat Migration Toolkit for Applications 8.2	Unaffected: 1784109883 , < * (rpm) cpe:/a:redhat:migration_toolkit_applications:8.2::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1782997656 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1782471672 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1782471731 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1782471732 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1782471849 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1782471734 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1782991170 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1782472374 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1782471796 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1782471661 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1782471753 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1782471740 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1782471834 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1782471730 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1782132126 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1782132686 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1782132403 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1782132444 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1782132767 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1782132493 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1782132379 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1782133907 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1782420349 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1782133865 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1782133337 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1782132473 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1782132660 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1782301637 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1782132564 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1782135300 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786612415 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787068065 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat Satellite 6.17	Unaffected: 1784834402 , < * (rpm) cpe:/a:redhat:satellite:6.17::el9
Red Hat	Red Hat Satellite 6.18	Unaffected: 1780492008 , < * (rpm) cpe:/a:redhat:satellite:6.18::el9
Red Hat	Red Hat Satellite 6.18	Unaffected: 1780414237 , < * (rpm) cpe:/a:redhat:satellite:6.18::el9
Red Hat	Red Hat Satellite 6.18	Unaffected: 1784554123 , < * (rpm) cpe:/a:redhat:satellite:6.18::el9
Red Hat	Red Hat Satellite 6.19	Unaffected: 1780492012 , < * (rpm) cpe:/a:redhat:satellite:6.19::el9
Red Hat	Red Hat Satellite 6.19	Unaffected: 1782139619 , < * (rpm) cpe:/a:redhat:satellite:6.19::el9
Red Hat	Red Hat Satellite 6.19	Unaffected: 1780403026 , < * (rpm) cpe:/a:redhat:satellite:6.19::el9
Red Hat	Red Hat Satellite 6.19	Unaffected: 1788190224 , < * (rpm) cpe:/a:redhat:satellite:6.19::el9
Red Hat	Exploit Intelligence	cpe:/a:redhat:exploit_intelligence:0
Red Hat	OpenShift Lightspeed	cpe:/a:redhat:openshift_lightspeed
Red Hat	Red Hat AI Inference Server	cpe:/a:redhat:ai_inference_server:3
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat Enterprise Linux AI (RHEL AI) 3	cpe:/a:redhat:enterprise_linux_ai:3
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-48710",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-02T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-09-02",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48710"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-03T03:56:06.627Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "third-party-advisory"
            ],
            "url": "https:/www.microsoft.com/en-us/security/blog/2026/08/26/when-ai-infrastructure-becomes-target-securing-gateways-control-points"
          },
          {
            "tags": [
              "third-party-advisory"
            ],
            "url": "https://www.wiz.io/blog/ai-infrastructure-honeypot"
          },
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48710"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-09-02T00:00:00.000Z",
            "value": "CVE-2026-48710 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/vllm-rocm-rhel9",
            "product": "Red Hat AI Inference Server 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782353093",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/vllm-cuda-rhel9",
            "product": "Red Hat AI Inference Server 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782352847",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-26/lightspeed-chatbot-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780102732",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-27/lightspeed-chatbot-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780099185",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "mta/mta-solution-server-rhel9",
            "product": "Red Hat Migration Toolkit for Applications 8.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784109883",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-feature-server-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782997656",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782471672",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782471731",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782471732",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782471849",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782471734",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-training-cuda128-torch29-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782991170",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782472374",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782471796",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782471661",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782471753",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782471740",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782471834",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782471730",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llama-stack-core-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782132126",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782132686",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782132403",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782132444",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782132767",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782132493",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782132379",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782133907",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-trustyai-nemo-guardrails-server-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782420349",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782133865",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782133337",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782132473",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782132660",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782301637",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782132564",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782135300",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-automl-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786612415",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-feature-server-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787068065",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-advisor-engine-rhel9",
            "product": "Red Hat Satellite 6.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784834402",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/foreman-mcp-server-rhel9",
            "product": "Red Hat Satellite 6.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780492008",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-host-inventory-rhel9",
            "product": "Red Hat Satellite 6.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780414237",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-vulnerability-engine-rhel9",
            "product": "Red Hat Satellite 6.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784554123",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/foreman-mcp-server-rhel9",
            "product": "Red Hat Satellite 6.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780492012",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-vmaas-rhel9",
            "product": "Red Hat Satellite 6.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782139619",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-host-inventory-rhel9",
            "product": "Red Hat Satellite 6.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780403026",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-vulnerability-engine-rhel9",
            "product": "Red Hat Satellite 6.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788190224",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:exploit_intelligence:0"
            ],
            "defaultStatus": "affected",
            "packageName": "exploit-intelligence-tech-preview/vulnerability-analysis-rhel9",
            "product": "Exploit Intelligence",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_lightspeed"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-lightspeed/lightspeed-ocp-rag-rhel9",
            "product": "OpenShift Lightspeed",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_lightspeed"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-lightspeed/lightspeed-service-api-rhel9",
            "product": "OpenShift Lightspeed",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/vllm-cpu-rhel9",
            "product": "Red Hat AI Inference Server",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/vllm-neuron-rhel9",
            "product": "Red Hat AI Inference Server",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/vllm-spyre-rhel9",
            "product": "Red Hat AI Inference Server",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/vllm-tpu-rhel9",
            "product": "Red Hat AI Inference Server",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaii/vllm-cpu-rhel9",
            "product": "Red Hat AI Inference Server",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaii/vllm-gaudi-rhel9",
            "product": "Red Hat AI Inference Server",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaii/vllm-neuron-rhel9",
            "product": "Red Hat AI Inference Server",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaii/vllm-spyre-rhel9",
            "product": "Red Hat AI Inference Server",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaii/vllm-tpu-rhel9",
            "product": "Red Hat AI Inference Server",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ansible-automation-platform-25/lightspeed-chatbot-rhel8",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ansible-automation-platform-26/mcp-tools-rhel9",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-aws-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-azure-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-azure-rocm-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-gaudi-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-gcp-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-rocm-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/disk-image-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-built-in-detector-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-caikit-nlp-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-caikit-tgis-serving-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-guardrails-detector-huggingface-runtime-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-kserve-agent-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kserve-autogluon-server-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-kserve-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-kserve-router-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kserve-storage-initializer-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-kv-cache-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mlflow-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mlserver-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-th06-cpu-torch210-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-th06-cuda130-torch210-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-th06-rocm64-torch291-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-vllm-cuda-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-vllm-gaudi-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-vllm-rocm-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-05-26T21:54:54.393Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in Starlette, a lightweight ASGI (Asynchronous Server Gateway Interface) framework. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP `Host` request header. This malformed header could cause the `request.url` to be incorrectly reconstructed, leading to a discrepancy with the actual requested path. Consequently, security restrictions enforced by middleware and endpoints that rely on `request.url` for validation could be bypassed, potentially allowing unauthorized access or actions."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Moderate"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1289",
                "description": "Improper Validation of Unsafe Equivalence in Input",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-04T12:05:00.370Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-48710"
          },
          {
            "name": "RHBZ#2481742",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481742"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48710.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30089"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30088"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24866"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23346"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43038"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37275"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60520"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34456"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:44696"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22993"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26226"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51357"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22992"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34532"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34526"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:63337"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:30089: Red Hat AI Inference Server 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30088: Red Hat AI Inference Server 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24866: Red Hat Ansible Automation Platform 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23346: Red Hat Ansible Automation Platform 2.7"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37275: Red Hat OpenShift AI 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60520: Red Hat OpenShift AI 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34456: Red Hat OpenShift AI 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:44696: Red Hat Satellite 6.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22993: Red Hat Satellite 6.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26226: Red Hat Satellite 6.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51357: Red Hat Satellite 6.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22992: Red Hat Satellite 6.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34532: Red Hat Satellite 6.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34526: Red Hat Satellite 6.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:63337: Red Hat Satellite 6.19"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-05-26T23:01:03.204Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-05-26T21:54:54.393Z",
            "value": "Made public."
          }
        ],
        "title": "starlette: Starlette: Security restriction bypass via malformed HTTP Host header",
        "workarounds": [
          {
            "lang": "en",
            "value": "Deploying an RFC-compliant reverse proxy (such as nginx, Apache, HAProxy, or Caddy) in front of the ASGI server will reject malformed Host headers before they reach the application. This is the most straightforward mitigation that does not require code changes.\n\nIf custom middleware is present, it should be updated to use `request.scope[\"path\"]` instead of `request.url.path` for any security decisions. The ASGI scope path is derived from the HTTP request line and is not influenced by the Host header, so it reflects the actual request target."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "starlette",
          "vendor": "Kludex",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.0.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to reconstruct `request.url`. Because the routing algorithm relies on the raw HTTP path while `request.url` is rebuilt from the `Host` header, a malformed header could make `request.url.path` differ from the path that was actually requested. Middleware and endpoints that apply security restrictions based on `request.url` (rather than the raw `scope` path) could therefore be bypassed. Users should upgrade to a version greater than or equal to version 1.0.1, which validates the `Host` header against the grammar of RFC 9112 \u00a73.2 / RFC 3986 \u00a73.2.2 when constructing `request.url` and falls back to `scope[\"server\"]` for malformed values."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-444",
              "description": "CWE-444: Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-26T21:54:54.393Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/Kludex/starlette/security/advisories/GHSA-86qp-5c8j-p5mr",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/Kludex/starlette/security/advisories/GHSA-86qp-5c8j-p5mr"
        },
        {
          "name": "https://github.com/Kludex/starlette/commit/764dab0dcfb9033d75442d7a359645c9f94648c6",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/Kludex/starlette/commit/764dab0dcfb9033d75442d7a359645c9f94648c6"
        },
        {
          "name": "https://badhost.org",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://badhost.org"
        },
        {
          "name": "https://github.com/pypa/advisory-database/tree/main/vulns/starlette/PYSEC-2026-161.yaml",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pypa/advisory-database/tree/main/vulns/starlette/PYSEC-2026-161.yaml"
        },
        {
          "name": "https://ostif.org/disclosing-the-badhost-vulnerability-in-starlette",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://ostif.org/disclosing-the-badhost-vulnerability-in-starlette"
        },
        {
          "name": "https://www.secwest.net/starlette",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.secwest.net/starlette"
        },
        {
          "name": "https://www.x41-dsec.de/lab/advisories/x41-2026-002-starlette",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.x41-dsec.de/lab/advisories/x41-2026-002-starlette"
        }
      ],
      "source": {
        "advisory": "GHSA-86qp-5c8j-p5mr",
        "discovery": "UNKNOWN"
      },
      "title": "Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-48710",
    "datePublished": "2026-05-26T21:54:54.393Z",
    "dateReserved": "2026-05-22T18:47:27.755Z",
    "dateUpdated": "2026-09-04T12:05:00.370Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-4926 (GCVE-0-2026-4926)

Vulnerability from cvelistv5 – Published: 2026-03-26 18:59 – Updated: 2026-09-17 12:04

Title

path-to-regexp vulnerable to Denial of Service via sequential optional groups

Summary

Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as `{a}{b}{c}:z`. The generated regex grows exponentially with the number of groups, causing denial of service. Patches: Fixed in version 8.4.0. Workarounds: Limit the number of sequential optional groups in route patterns. Avoid passing user-controlled input as route patterns.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-03-27 19:44 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption
CWE-1333 - Inefficient Regular Expression Complexity

Assigner

openjs redhat root

References

22 references

URL	Tags
https://cna.openjsf.org/security-advisories.html
https://access.redhat.com/security/cve/CVE-2026-4926	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2451867	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:24761	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24762	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17789	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19409	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19410	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24866	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:13545	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:9742	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:13826	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36651	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40945	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40118	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50300	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65126	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:10175	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:9385	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:10172	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:10153	vendor-advisoryx_refsource_REDHAT

Impacted products

58 products

Vendor	Product	Version
path-to-regexp	path-to-regexp	Affected: 8.0.0 , < 8.4.0 (semver) Unaffected: 8.4.0 (semver)
Red Hat	Cryostat 4 on RHEL 9	Unaffected: 4.2.0-9 , < * (rpm) cpe:/a:redhat:cryostat:4::el9
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:2.5.20260422-3.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:2.5.20260422-3.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	Unaffected: 0:2.6.9-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Migration Toolkit for Virtualization 2.1	Unaffected: 1779139872 , < * (rpm) cpe:/a:redhat:migration_toolkit_virtualization:2.10::el9
Red Hat	Migration Toolkit for Virtualization 2.9	Unaffected: 1778927462 , < * (rpm) cpe:/a:redhat:migration_toolkit_virtualization:2.9::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1777386606 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1779773804 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Developer Hub 1.8	Unaffected: 1776784286 , < * (rpm) cpe:/a:redhat:rhdh:1.8::el9
Red Hat	Red Hat Developer Hub 1.9	Unaffected: 1777903262 , < * (rpm) cpe:/a:redhat:rhdh:1.9::el9
Red Hat	Red Hat Edge Manager 1.0	Unaffected: 1783502765 , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	Red Hat Edge Manager 1.0	Unaffected: 1783502438 , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784194938 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784194574 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784126822 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784127736 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Red Hat Migration Toolkit for Applications 8.1	Unaffected: 1785169013 , < * (rpm) cpe:/a:redhat:migration_toolkit_applications:8.1::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1787801527 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.27	Unaffected: 1776744110 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.27::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.27	Unaffected: 1776795400 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.27::el9
Red Hat	Red Hat OpenShift distributed tracing 3.9.3	Unaffected: 1776435608 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.9::el9
Red Hat	Red Hat Trusted Artifact Signer 1.3	Unaffected: 1776673130 , < * (rpm) Unaffected: 1776889929 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.3::el9
Red Hat	Cryostat 4	cpe:/a:redhat:cryostat:4
Red Hat	Logging Subsystem for Red Hat OpenShift	cpe:/a:redhat:logging:5
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	Network Observability Operator	cpe:/a:redhat:network_observ_optr:1
Red Hat	OpenShift Lightspeed	cpe:/a:redhat:openshift_lightspeed
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Service Mesh 2	cpe:/a:redhat:service_mesh:2
Red Hat	OpenShift Service Mesh 3	cpe:/a:redhat:service_mesh:3
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2
Red Hat	Red Hat Advanced Cluster Security 4	cpe:/a:redhat:advanced_cluster_security:4
Red Hat	Red Hat AMQ Broker 7	cpe:/a:redhat:amq_broker:7
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat build of Apache Camel - HawtIO 4	cpe:/a:redhat:apache_camel_hawtio:4
Red Hat	Red Hat build of Apicurio Registry 2	cpe:/a:redhat:service_registry:2
Red Hat	Red Hat Build of Podman Desktop	cpe:/a:redhat:podman_desktop:1
Red Hat	Red Hat Data Grid 8	cpe:/a:redhat:jboss_data_grid:8
Red Hat	Red Hat Developer Hub	cpe:/a:redhat:rhdh:1
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Fuse 7	cpe:/a:redhat:jboss_fuse:7
Red Hat	Red Hat JBoss Enterprise Application Platform 7	cpe:/a:redhat:jboss_enterprise_application_platform:7
Red Hat	Red Hat JBoss Enterprise Application Platform 8	cpe:/a:redhat:jboss_enterprise_application_platform:8
Red Hat	Red Hat JBoss Enterprise Application Platform Expansion Pack	cpe:/a:redhat:jbosseapxp
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat Openshift Data Foundation 4	cpe:/a:redhat:openshift_data_foundation:4
Red Hat	Red Hat OpenShift GitOps	cpe:/a:redhat:openshift_gitops:1
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat Process Automation 7	cpe:/a:redhat:jboss_enterprise_bpms_platform:7
Red Hat	Red Hat Quay 3	cpe:/a:redhat:quay:3
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6
Red Hat	Red Hat Single Sign-On 7	cpe:/a:redhat:red_hat_single_sign_on:7
Red Hat	Red Hat Trusted Profile Analyzer	cpe:/a:redhat:trusted_profile_analyzer:2
Red Hat	Self-service automation portal 2	cpe:/a:redhat:ansible_portal:2

Credits

uug4na blakeembrey UlisesGascon

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-4926",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-27T19:44:44.790485Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-27T19:44:53.294Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cryostat/cryostat-openshift-console-plugin-rhel9",
            "product": "Cryostat 4 on RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4.2.0-9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.5.20260422-3.el8ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.5.20260422-3.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-platform-ui",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.6.9-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_virtualization:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "migration-toolkit-virtualization/mtv-console-plugin-rhel9",
            "product": "Migration Toolkit for Virtualization 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779139872",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_virtualization:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "migration-toolkit-virtualization/mtv-console-plugin-rhel9",
            "product": "Migration Toolkit for Virtualization 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778927462",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-tech-preview/mcp-server-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1777386606",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-26/gateway-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779773804",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-hub-rhel9",
            "product": "Red Hat Developer Hub 1.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776784286",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-hub-rhel9",
            "product": "Red Hat Developer Hub 1.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1777903262",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-ocp-rhel9",
            "product": "Red Hat Edge Manager 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783502765",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-rhel9",
            "product": "Red Hat Edge Manager 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783502438",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-ocp-rhel10",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784194938",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-rhel10",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784194574",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-ocp-rhel9",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784126822",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-rhel9",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784127736",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "mta/mta-ui-rhel9",
            "product": "Red Hat Migration Toolkit for Applications 8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785169013",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787801527",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.27::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/code-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.27",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776744110",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.27::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/jetbrains-ide-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.27",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776795400",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-jaeger-query-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.9.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776435608",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/rhtas-console-ui-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776673130",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776889929",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "io.cryostat-cryostat",
            "product": "Cryostat 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/elasticsearch6-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/elasticsearch-operator-bundle",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/elasticsearch-proxy-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/elasticsearch-rhel9-operator",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/kibana6-rhel8",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/logging-curator5-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "network-observability/network-observability-console-plugin-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_lightspeed"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9",
            "product": "OpenShift Lightspeed",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_lightspeed"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-lightspeed/lightspeed-console-plugin-rhel9",
            "product": "OpenShift Lightspeed",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-console-plugin-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
            "product": "OpenShift Service Mesh 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-rhel8",
            "product": "OpenShift Service Mesh 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-operator-bundle",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-rhel9-operator",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_broker:7"
            ],
            "defaultStatus": "affected",
            "packageName": "amq7-tech-preview/amq-broker-jolokia-api-server-rhel9",
            "product": "Red Hat AMQ Broker 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_broker:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "org.jolokia-jolokia-parent",
            "product": "Red Hat AMQ Broker 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-controller",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-eda-controller",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:apache_camel_hawtio:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "io.hawt-project",
            "product": "Red Hat build of Apache Camel - HawtIO 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_registry:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "io.apicurio-apicurio-registry",
            "product": "Red Hat build of Apicurio Registry 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:1"
            ],
            "defaultStatus": "affected",
            "packageName": "podman-desktop-macos-1-0",
            "product": "Red Hat Build of Podman Desktop",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:1"
            ],
            "defaultStatus": "affected",
            "packageName": "podman-desktop-windows-1-0",
            "product": "Red Hat Build of Podman Desktop",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_data_grid:8"
            ],
            "defaultStatus": "affected",
            "packageName": "org.infinispan-infinispan-console",
            "product": "Red Hat Data Grid 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/backstage-community-plugin-catalog-backend-module-scaffolder-relation-processor",
            "product": "Red Hat Developer Hub",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "linux-sgx",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mozjs60",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "pcs",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "gjs",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "linux-sgx",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "pcs",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_fuse:7"
            ],
            "defaultStatus": "affected",
            "packageName": "io.apicurio-apicurito",
            "product": "Red Hat Fuse 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_fuse:7"
            ],
            "defaultStatus": "affected",
            "packageName": "io.hawt-hawtio-online",
            "product": "Red Hat Fuse 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_fuse:7"
            ],
            "defaultStatus": "affected",
            "packageName": "io.hawt-project",
            "product": "Red Hat Fuse 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_fuse:7"
            ],
            "defaultStatus": "affected",
            "packageName": "io.syndesis-syndesis-parent",
            "product": "Red Hat Fuse 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_enterprise_application_platform:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "io.hawt-project",
            "product": "Red Hat JBoss Enterprise Application Platform 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_enterprise_application_platform:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "io.hawt-project",
            "product": "Red Hat JBoss Enterprise Application Platform 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jbosseapxp"
            ],
            "defaultStatus": "unaffected",
            "packageName": "io.hawt-project",
            "product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jbosseapxp"
            ],
            "defaultStatus": "unaffected",
            "packageName": "org.keycloak-keycloak-parent",
            "product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel8",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mlflow-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-agent-installer-ui-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-console",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-console-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/argocd-rhel8",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/argocd-rhel9",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/console-plugin-rhel8",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-console-plugin",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "org.kie-process-migration-service",
            "product": "Red Hat Process Automation 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "org.uberfire-uberfire-parent",
            "product": "Red Hat Process Automation 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "nodejs-react-router",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "nodejs-react-router-dom",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_single_sign_on:7"
            ],
            "defaultStatus": "affected",
            "packageName": "org.keycloak-keycloak-parent",
            "product": "Red Hat Single Sign-On 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_profile_analyzer:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhtpa/rhtpa-trustification-service-rhel9",
            "product": "Red Hat Trusted Profile Analyzer",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_portal:2"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform/automation-portal",
            "product": "Self-service automation portal 2",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-03-26T18:59:38.000Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1333",
                "description": "Inefficient Regular Expression Complexity",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-17T12:04:38.293Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-4926"
          },
          {
            "name": "RHBZ#2451867",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451867"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4926.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24761"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24762"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17789"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19409"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19410"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24866"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:13545"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:9742"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:13826"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36651"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40945"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40118"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50300"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65126"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:10175"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:9385"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:10172"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:10153"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:24761: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24762: Red Hat Ansible Automation Platform 2.6 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17789: Cryostat 4 on RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19409: Migration Toolkit for Virtualization 2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19410: Migration Toolkit for Virtualization 2.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24866: Red Hat Ansible Automation Platform 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:13545: Red Hat Ansible Automation Platform 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:9742: Red Hat Developer Hub 1.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:13826: Red Hat Developer Hub 1.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65126: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:10175: Red Hat OpenShift Dev Spaces 3.27"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:9385: Red Hat OpenShift distributed tracing 3.9.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:10172: Red Hat Trusted Artifact Signer 1.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:10153: Red Hat Trusted Artifact Signer 1.3"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-03-26T20:03:28.427Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-03-26T18:59:38.000Z",
            "value": "Made public."
          }
        ],
        "title": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions",
        "workarounds": [
          {
            "lang": "en",
            "value": "To mitigate this vulnerability, limit the use of multiple sequential optional groups in route patterns within applications that use `path-to-regexp`. Additionally, avoid directly passing user-controlled input as route patterns to prevent the generation of maliciously crafted regular expressions."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/path-to-regexp",
          "product": "path-to-regexp",
          "vendor": "path-to-regexp",
          "versions": [
            {
              "lessThan": "8.4.0",
              "status": "affected",
              "version": "8.0.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "8.4.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "uug4na"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "blakeembrey"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "UlisesGascon"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Impact:\n\nA bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as `{a}{b}{c}:z`. The generated regex grows exponentially with the number of groups, causing denial of service.\n\nPatches:\n\nFixed in version 8.4.0.\n\nWorkarounds:\n\nLimit the number of sequential optional groups in route patterns. Avoid passing user-controlled input as route patterns."
            }
          ],
          "value": "Impact:\n\nA bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as `{a}{b}{c}:z`. The generated regex grows exponentially with the number of groups, causing denial of service.\n\nPatches:\n\nFixed in version 8.4.0.\n\nWorkarounds:\n\nLimit the number of sequential optional groups in route patterns. Avoid passing user-controlled input as route patterns."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-1333",
              "description": "CWE-1333: Inefficient Regular Expression Complexity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-26T18:59:38.000Z",
        "orgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
        "shortName": "openjs"
      },
      "references": [
        {
          "url": "https://cna.openjsf.org/security-advisories.html"
        }
      ],
      "title": "path-to-regexp vulnerable to Denial of Service via sequential optional groups",
      "x_generator": {
        "engine": "cve-kit 1.0.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
    "assignerShortName": "openjs",
    "cveId": "CVE-2026-4926",
    "datePublished": "2026-03-26T18:59:38.000Z",
    "dateReserved": "2026-03-26T18:36:49.229Z",
    "dateUpdated": "2026-09-17T12:04:38.293Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-6321 (GCVE-0-2026-6321)

Vulnerability from cvelistv5 – Published: 2026-05-04 19:31 – Updated: 2026-09-10 12:04

Title

fast-uri vulnerable to path traversal via percent-encoded dot segments

Summary

fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions. Encoded path data was treated like real slashes and parent-directory references, so distinct URIs could collapse onto the same normalized path. Applications that normalize or compare attacker-controlled URLs to enforce path-based policy can be bypassed, with a path that appears confined under an allowed prefix normalizing to a different location. Versions <= 3.1.0 are affected. Update to 3.1.1 or later.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-05 12:44 UTC

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

openjs redhat root

References

26 references

URL	Tags
https://github.com/fastify/fast-uri/security/advi…
https://cna.openjsf.org/security-advisories.html
https://access.redhat.com/security/cve/CVE-2026-6321	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2466582	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:42078	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42079	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34342	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37385	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25089	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24473	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24766	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24866	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21338	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26234	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20338	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24977	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25123	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26416	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56431	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26420	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56366	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19238	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57013	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56928	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26214	vendor-advisoryx_refsource_REDHAT

Impacted products

149 products

Vendor	Product	Version
fast-uri	fast-uri	Affected: 0 , < 3.1.1 (semver) Unaffected: 3.1.1 (semver)
Red Hat	HawtIO HawtIO 4.4.0	cpe:/a:redhat:apache_camel_hawtio:4.4::el9
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:2.5.20260715-1.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:2.5.20260715-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	Unaffected: 0:2.6.11-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.1.1-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782840519 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839981 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839193 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782838753 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839279 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782840539 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782841925 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782838476 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839996 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839494 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Network Observability (NETOBSERV) 1.12.2	Unaffected: 1780556069 , < * (rpm) cpe:/a:redhat:network_observ_optr:1.12::el9
Red Hat	Red Hat Ansible Automation Platform 2.5	Unaffected: 1780082949 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1779784904 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1779783248 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Developer Hub 1.8	Unaffected: 1779841586 , < * (rpm) cpe:/a:redhat:rhdh:1.8::el9
Red Hat	Red Hat Developer Hub 1.9	Unaffected: 1781187342 , < * (rpm) cpe:/a:redhat:rhdh:1.9::el9
Red Hat	Red Hat Discovery 2	Unaffected: 1779395188 , < * (rpm) cpe:/a:redhat:discovery:2::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1780467029 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1780467147 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat Openshift Data Foundation 4.16	Unaffected: 1781183284 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.16::el9
Red Hat	Red Hat Openshift Data Foundation 4.16	Unaffected: 1781183499 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.16::el9
Red Hat	Red Hat Openshift Data Foundation 4.16	Unaffected: 1780663368 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.16::el9
Red Hat	Red Hat Openshift Data Foundation 4.16	Unaffected: 1781184121 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.16::el9
Red Hat	Red Hat Openshift Data Foundation 4.16	Unaffected: 1780663596 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.16::el9
Red Hat	Red Hat Openshift Data Foundation 4.16	Unaffected: 1781183713 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.16::el9
Red Hat	Red Hat Openshift Data Foundation 4.16	Unaffected: 1780663548 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.16::el9
Red Hat	Red Hat Openshift Data Foundation 4.16	Unaffected: 1781183811 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.16::el9
Red Hat	Red Hat Openshift Data Foundation 4.16	Unaffected: 1781184611 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.16::el9
Red Hat	Red Hat Openshift Data Foundation 4.16	Unaffected: 1780663638 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.16::el9
Red Hat	Red Hat Openshift Data Foundation 4.16	Unaffected: 1780663861 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.16::el9
Red Hat	Red Hat Openshift Data Foundation 4.16	Unaffected: 1780663920 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.16::el9
Red Hat	Red Hat Openshift Data Foundation 4.16	Unaffected: 1781184484 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.16::el9
Red Hat	Red Hat Openshift Data Foundation 4.16	Unaffected: 1780663886 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.16::el9
Red Hat	Red Hat Openshift Data Foundation 4.16	Unaffected: 1781184239 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.16::el9
Red Hat	Red Hat Openshift Data Foundation 4.16	Unaffected: 1780664089 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.16::el9
Red Hat	Red Hat Openshift Data Foundation 4.16	Unaffected: 1780664140 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.16::el9
Red Hat	Red Hat Openshift Data Foundation 4.16	Unaffected: 1781184468 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.16::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1781555717 , < * (rpm) Unaffected: 1786705347 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1781554936 , < * (rpm) Unaffected: 1786706101 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1781555645 , < * (rpm) Unaffected: 1786705558 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1781556009 , < * (rpm) Unaffected: 1786705646 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1781558423 , < * (rpm) Unaffected: 1786706138 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1781555708 , < * (rpm) Unaffected: 1786705741 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1781557202 , < * (rpm) Unaffected: 1786705777 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1781555679 , < * (rpm) Unaffected: 1786705802 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1781557189 , < * (rpm) Unaffected: 1786705938 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1781556534 , < * (rpm) Unaffected: 1786706577 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1781556085 , < * (rpm) Unaffected: 1786706125 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1781555971 , < * (rpm) Unaffected: 1786706177 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1781557158 , < * (rpm) Unaffected: 1786706188 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1781556690 , < * (rpm) Unaffected: 1786706679 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1781558326 , < * (rpm) Unaffected: 1786706357 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1781556544 , < * (rpm) Unaffected: 1786706612 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1781556958 , < * (rpm) Unaffected: 1786706644 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1781556901 , < * (rpm) Unaffected: 1786706659 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1781557496 , < * (rpm) Unaffected: 1786706880 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1778576707 , < * (rpm) Unaffected: 1786701839 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1778576350 , < * (rpm) Unaffected: 1786701555 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1778769574 , < * (rpm) Unaffected: 1786702052 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1778576929 , < * (rpm) Unaffected: 1786702559 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1778770148 , < * (rpm) Unaffected: 1786702713 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1778576957 , < * (rpm) Unaffected: 1786702264 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1779093256 , < * (rpm) Unaffected: 1786702448 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1778577150 , < * (rpm) Unaffected: 1786702276 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1778577175 , < * (rpm) Unaffected: 1786702440 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1778577083 , < * (rpm) Unaffected: 1786702315 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1778770362 , < * (rpm) Unaffected: 1786703071 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1778577169 , < * (rpm) Unaffected: 1786702563 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1778577201 , < * (rpm) Unaffected: 1786702636 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1778577489 , < * (rpm) Unaffected: 1786702623 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1778770439 , < * (rpm) Unaffected: 1786703137 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1778577548 , < * (rpm) Unaffected: 1786702716 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1778770127 , < * (rpm) Unaffected: 1786702872 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1778577523 , < * (rpm) Unaffected: 1786702949 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1778577519 , < * (rpm) Unaffected: 1786702917 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1778577696 , < * (rpm) Unaffected: 1786703143 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786627460 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786626399 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786628235 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786627106 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786629761 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786627559 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786687918 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786629478 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786628142 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786631508 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786628053 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786627382 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786627430 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786629076 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786627469 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786644072 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786688215 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786628340 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786628623 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786632256 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786628935 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786629548 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787057250 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787057964 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787057603 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787058450 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787057989 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787059853 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787057849 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787060257 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787058278 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787058658 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787058706 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787058403 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787059072 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787058807 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787058588 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787058970 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787059538 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787059616 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787061098 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787059085 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787059621 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787059386 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787060080 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787060105 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787059493 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787060201 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787060274 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1787061554 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.28	Unaffected: 1780685176 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.28::el9
Red Hat	Red Hat Satellite 6.18	Unaffected: 1781181673 , < * (rpm) cpe:/a:redhat:satellite:6.18::el9
Red Hat	Confidential Compute Attestation	cpe:/a:redhat:confidential_compute_attestation:1
Red Hat	Cryostat 4	cpe:/a:redhat:cryostat:4
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat Build of Podman Desktop	cpe:/a:redhat:podman_desktop:1
Red Hat	Red Hat Build of Podman Desktop - Tech Preview	cpe:/a:redhat:podman_desktop:0
Red Hat	Red Hat Data Grid 8	cpe:/a:redhat:jboss_data_grid:8
Red Hat	Red Hat Developer Hub	cpe:/a:redhat:rhdh:1
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6
Red Hat	streams for Apache Kafka 2	cpe:/a:redhat:amq_streams:2
Red Hat	streams for Apache Kafka 3	cpe:/a:redhat:amq_streams:3

Credits

Jvr Matteo Collina Ulises Gascón KaKa

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-6321",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-05T12:44:27.336265Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-05T12:44:34.743Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:apache_camel_hawtio:4.4::el9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "io.hawt-project",
            "product": "HawtIO HawtIO 4.4.0",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.5.20260715-1.el8ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.5.20260715-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-platform-ui",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.6.11-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-podman-desktop",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.1.1-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782840519",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839981",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839193",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782838753",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/logging-console-plugin-pf4-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839279",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/logging-console-plugin-pf5-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782840539",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/logging-console-plugin-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782841925",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/monitoring-console-plugin-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782838476",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839996",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839494",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1.12::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "network-observability/network-observability-console-plugin-rhel9",
            "product": "Network Observability (NETOBSERV) 1.12.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780556069",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-25/lightspeed-rhel8",
            "product": "Red Hat Ansible Automation Platform 2.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780082949",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-26/lightspeed-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779784904",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-tech-preview/mcp-server-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779783248",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-hub-rhel9",
            "product": "Red Hat Developer Hub 1.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779841586",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-hub-rhel9",
            "product": "Red Hat Developer Hub 1.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781187342",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:discovery:2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "discovery/discovery-ui-rhel9",
            "product": "Red Hat Discovery 2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779395188",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-dashboard-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780467029",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780467147",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781183284",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781183499",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780663368",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781184121",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780663596",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781183713",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780663548",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781183811",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781184611",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780663638",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780663861",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780663920",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781184484",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780663886",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781184239",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780664089",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780664140",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781184468",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781555717",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705347",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781554936",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706101",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781555645",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705558",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781556009",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705646",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781558423",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706138",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781555708",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705741",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781557202",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705777",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781555679",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705802",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781557189",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705938",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781556534",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706577",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781556085",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706125",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781555971",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706177",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781557158",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706188",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781556690",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706679",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781558326",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706357",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781556544",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706612",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781556958",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706644",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781556901",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706659",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781557496",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706880",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778576707",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786701839",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778576350",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786701555",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778769574",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702052",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778576929",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702559",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778770148",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702713",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778576957",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702264",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779093256",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702448",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778577150",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702276",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778577175",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702440",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778577083",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702315",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778770362",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786703071",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778577169",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702563",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778577201",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702636",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778577489",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702623",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778770439",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786703137",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778577548",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702716",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778770127",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702872",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778577523",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702949",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778577519",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702917",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778577696",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786703143",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627460",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786626399",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628235",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627106",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786629761",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627559",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786687918",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786629478",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628142",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786631508",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628053",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627382",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627430",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786629076",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627469",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786644072",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786688215",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628340",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628623",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786632256",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628935",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786629548",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787057250",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787057964",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/devicefinder-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787057603",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787058450",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787057989",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787059853",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787057849",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787060257",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787058278",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-blackbox-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787058658",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787058706",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787058403",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787059072",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787058807",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787058588",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787058970",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-drbd-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787059538",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787059616",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787061098",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-lightspeed-rag-content-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787059085",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787059621",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787059386",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787060080",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787060105",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787059493",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-volsync-plugin-mover-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787060201",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-volsync-plugin-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787060274",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787061554",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.28::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/dashboard-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.28",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780685176",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-advisor-frontend-rhel9",
            "product": "Red Hat Satellite 6.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781181673",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-sandboxed-containers/osc-pccs",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "cryostat-openshift-console-plugin-npm",
            "product": "Cryostat 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-console-plugin-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-console-plugin-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-26/gateway-rhel9",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform/automation-dashboard-rhel9",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:1"
            ],
            "defaultStatus": "affected",
            "packageName": "podman-desktop-macos-1-0",
            "product": "Red Hat Build of Podman Desktop",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:1"
            ],
            "defaultStatus": "affected",
            "packageName": "podman-desktop-windows-1-0",
            "product": "Red Hat Build of Podman Desktop",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdesktop/rh-podman-desktop-ext-bootc-rhel10",
            "product": "Red Hat Build of Podman Desktop - Tech Preview",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_data_grid:8"
            ],
            "defaultStatus": "affected",
            "packageName": "org.infinispan-infinispan-console",
            "product": "Red Hat Data Grid 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/backstage-community-plugin-catalog-backend-module-scaffolder-relation-processor",
            "product": "Red Hat Developer Hub",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "linux-sgx",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "linux-sgx",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-dashboard-rhel8",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mlflow-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-maas-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "nodejs-compression-webpack-plugin",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "nodejs-mini-css-extract-plugin",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "nodejs-webpack",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_streams:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "com.github.streamshub-console",
            "product": "streams for Apache Kafka 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_streams:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "com.github.streamshub-console",
            "product": "streams for Apache Kafka 3",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-05-04T19:31:57.253Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by providing a specially crafted Uniform Resource Locator (URL) containing percent-encoded path separators and dot segments. Due to incorrect processing, fast-uri would decode these elements before proper normalization, leading to distinct URLs resolving to the same internal path. This could allow an attacker to bypass security policies that rely on path-based comparisons, potentially gaining unauthorized access to resources."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-22",
                "description": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-10T12:04:59.137Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-6321"
          },
          {
            "name": "RHBZ#2466582",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466582"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6321.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42078"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42079"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34342"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37385"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25089"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24473"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24766"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24866"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:21338"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26234"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20338"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24977"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25123"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26416"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56431"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26420"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56366"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19238"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57013"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56928"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26214"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42079: Red Hat Ansible Automation Platform 2.6 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34342: Cluster Observability Operator 1.5.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37385: Red Hat Enterprise Linux Extensions Channel (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25089: HawtIO HawtIO 4.4.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24473: Network Observability (NETOBSERV) 1.12.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24766: Red Hat Ansible Automation Platform 2.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24866: Red Hat Ansible Automation Platform 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:21338: Red Hat Developer Hub 1.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26234: Red Hat Developer Hub 1.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20338: Red Hat Discovery 2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25123: Red Hat OpenShift Dev Spaces 3.28"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26416: Red Hat Openshift Data Foundation 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56431: Red Hat Openshift Data Foundation 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26420: Red Hat Openshift Data Foundation 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56366: Red Hat Openshift Data Foundation 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19238: Red Hat Openshift Data Foundation 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57013: Red Hat Openshift Data Foundation 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56928: Red Hat Openshift Data Foundation 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26214: Red Hat Satellite 6.18"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-05-04T20:01:14.938Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-05-04T19:31:57.253Z",
            "value": "Made public."
          }
        ],
        "title": "fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies",
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/fast-uri",
          "product": "fast-uri",
          "vendor": "fast-uri",
          "versions": [
            {
              "lessThan": "3.1.1",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "3.1.1",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Jvr"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Matteo Collina"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "Ulises Gasc\u00f3n"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "KaKa"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions. Encoded path data was treated like real slashes and parent-directory references, so distinct URIs could collapse onto the same normalized path. Applications that normalize or compare attacker-controlled URLs to enforce path-based policy can be bypassed, with a path that appears confined under an allowed prefix normalizing to a different location. Versions \u003c= 3.1.0 are affected. Update to 3.1.1 or later."
            }
          ],
          "value": "fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions. Encoded path data was treated like real slashes and parent-directory references, so distinct URIs could collapse onto the same normalized path. Applications that normalize or compare attacker-controlled URLs to enforce path-based policy can be bypassed, with a path that appears confined under an allowed prefix normalizing to a different location. Versions \u003c= 3.1.0 are affected. Update to 3.1.1 or later."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-04T19:31:57.253Z",
        "orgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
        "shortName": "openjs"
      },
      "references": [
        {
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-q3j6-qgpj-74h6"
        },
        {
          "url": "https://cna.openjsf.org/security-advisories.html"
        }
      ],
      "title": "fast-uri vulnerable to path traversal via percent-encoded dot segments",
      "x_generator": {
        "engine": "cve-kit 1.0.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
    "assignerShortName": "openjs",
    "cveId": "CVE-2026-6321",
    "datePublished": "2026-05-04T19:31:57.253Z",
    "dateReserved": "2026-04-14T20:23:01.545Z",
    "dateUpdated": "2026-09-10T12:04:59.137Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:24866

CVE-2026-41140 (GCVE-0-2026-41140)

CVE-2026-48710 (GCVE-0-2026-48710)

CVE-2026-4926 (GCVE-0-2026-4926)

CVE-2026-6321 (GCVE-0-2026-6321)

Tags

Sightings

Nomenclature

Related by attack behaviour