{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "A new version of Migration Toolkit for Applications (MTA) is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Migration Toolkit for Applications (MTA) accelerates large-scale application modernization efforts across hybrid cloud environments on Red Hat OpenShift. \nThis solution provides insight throughout the adoption process, at both the portfolio and application levels: inventory, assess, analyze, and manage\napplications for faster migration to OpenShift via the user interface.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:50300",
        "url": "https://access.redhat.com/errata/RHSA-2026:50300"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
        "url": "https://access.redhat.com/security/cve/CVE-2026-12143"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-13149",
        "url": "https://access.redhat.com/security/cve/CVE-2026-13149"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
        "url": "https://access.redhat.com/security/cve/CVE-2026-25681"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-26996",
        "url": "https://access.redhat.com/security/cve/CVE-2026-26996"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
        "url": "https://access.redhat.com/security/cve/CVE-2026-27136"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-27904",
        "url": "https://access.redhat.com/security/cve/CVE-2026-27904"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33811"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39820"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39821"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-40895",
        "url": "https://access.redhat.com/security/cve/CVE-2026-40895"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42039",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42039"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42041",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42041"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42044",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42044"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42264",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42264"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42342",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42342"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42499"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42504"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
        "url": "https://access.redhat.com/security/cve/CVE-2026-44486"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
        "url": "https://access.redhat.com/security/cve/CVE-2026-44487"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
        "url": "https://access.redhat.com/security/cve/CVE-2026-44488"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
        "url": "https://access.redhat.com/security/cve/CVE-2026-44492"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
        "url": "https://access.redhat.com/security/cve/CVE-2026-44494"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
        "url": "https://access.redhat.com/security/cve/CVE-2026-44495"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
        "url": "https://access.redhat.com/security/cve/CVE-2026-44496"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-4926",
        "url": "https://access.redhat.com/security/cve/CVE-2026-4926"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-55603",
        "url": "https://access.redhat.com/security/cve/CVE-2026-55603"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://developers.redhat.com/products/mta/overview",
        "url": "https://developers.redhat.com/products/mta/overview"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/migration_toolkit_for_applications/",
        "url": "https://docs.redhat.com/en/documentation/migration_toolkit_for_applications/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50300.json"
      }
    ],
    "title": "Red Hat Security Advisory: Migration Toolkit for Applications",
    "tracking": {
      "current_release_date": "2026-08-05T16:35:39+00:00",
      "generator": {
        "date": "2026-08-05T16:35:39+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.12"
        }
      },
      "id": "RHSA-2026:50300",
      "initial_release_date": "2026-08-04T17:05:10+00:00",
      "revision_history": [
        {
          "date": "2026-08-04T17:05:10+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-04T17:05:24+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-05T16:35:39+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Migration Toolkit for Applications 8.1",
                "product": {
                  "name": "Red Hat Migration Toolkit for Applications 8.1",
                  "product_id": "Red Hat Migration Toolkit for Applications 8.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Migration Toolkit for Applications"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
                  "product_id": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-analyzer-addon-rhel9@sha256%3Ae8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-analyzer-addon-rhel9\u0026tag=1784900791"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
                  "product_id": "registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-cli-rhel9@sha256%3A5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-cli-rhel9\u0026tag=1785171639"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
                  "product_id": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-discovery-addon-rhel9@sha256%3A8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-discovery-addon-rhel9\u0026tag=1785168960"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
                  "product_id": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-dotnet-external-provider-rhel9@sha256%3A64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-dotnet-external-provider-rhel9\u0026tag=1784312241"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
                  "product_id": "registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-generic-external-provider-rhel9@sha256%3Af698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-generic-external-provider-rhel9\u0026tag=1784810810"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
                  "product_id": "registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-hub-rhel9@sha256%3A2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-hub-rhel9\u0026tag=1784313347"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
                  "product_id": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-java-external-provider-rhel9@sha256%3A7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-java-external-provider-rhel9\u0026tag=1785170480"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
                  "product_id": "registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-rhel9-operator@sha256%3A439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-rhel9-operator\u0026tag=1785168960"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
                  "product_id": "registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-operator-bundle@sha256%3Abbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-operator-bundle\u0026tag=1785177948"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
                  "product_id": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-platform-addon-rhel9@sha256%3A55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-platform-addon-rhel9\u0026tag=1784312255"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
                  "product_id": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-solution-server-rhel9@sha256%3A52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-solution-server-rhel9\u0026tag=1785168916"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
                  "product_id": "registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-ui-rhel9@sha256%3A32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-ui-rhel9\u0026tag=1785169013"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
                  "product_id": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-analyzer-addon-rhel9@sha256%3Af2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-analyzer-addon-rhel9\u0026tag=1784900791"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
                  "product_id": "registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-cli-rhel9@sha256%3Ad54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-cli-rhel9\u0026tag=1785171639"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
                  "product_id": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-discovery-addon-rhel9@sha256%3Add974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-discovery-addon-rhel9\u0026tag=1785168960"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
                  "product_id": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-dotnet-external-provider-rhel9@sha256%3A8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-dotnet-external-provider-rhel9\u0026tag=1784312241"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
                  "product_id": "registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-generic-external-provider-rhel9@sha256%3Adbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-generic-external-provider-rhel9\u0026tag=1784810810"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
                  "product_id": "registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-hub-rhel9@sha256%3A34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-hub-rhel9\u0026tag=1784313347"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
                  "product_id": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-java-external-provider-rhel9@sha256%3A3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-java-external-provider-rhel9\u0026tag=1785170480"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
                  "product_id": "registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-rhel9-operator@sha256%3Ac5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-rhel9-operator\u0026tag=1785168960"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
                  "product_id": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-platform-addon-rhel9@sha256%3A609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-platform-addon-rhel9\u0026tag=1784312255"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
                  "product_id": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-solution-server-rhel9@sha256%3A8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-solution-server-rhel9\u0026tag=1785168916"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64",
                  "product_id": "registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-ui-rhel9@sha256%3A8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-ui-rhel9\u0026tag=1785169013"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64 as a component of Red Hat Migration Toolkit for Applications 8.1",
          "product_id": "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64 as a component of Red Hat Migration Toolkit for Applications 8.1",
          "product_id": "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64 as a component of Red Hat Migration Toolkit for Applications 8.1",
          "product_id": "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64 as a component of Red Hat Migration Toolkit for Applications 8.1",
          "product_id": "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64 as a component of Red Hat Migration Toolkit for Applications 8.1",
          "product_id": "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64 as a component of Red Hat Migration Toolkit for Applications 8.1",
          "product_id": "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64 as a component of Red Hat Migration Toolkit for Applications 8.1",
          "product_id": "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64 as a component of Red Hat Migration Toolkit for Applications 8.1",
          "product_id": "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64 as a component of Red Hat Migration Toolkit for Applications 8.1",
          "product_id": "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64 as a component of Red Hat Migration Toolkit for Applications 8.1",
          "product_id": "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64 as a component of Red Hat Migration Toolkit for Applications 8.1",
          "product_id": "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64 as a component of Red Hat Migration Toolkit for Applications 8.1",
          "product_id": "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64 as a component of Red Hat Migration Toolkit for Applications 8.1",
          "product_id": "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64 as a component of Red Hat Migration Toolkit for Applications 8.1",
          "product_id": "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64 as a component of Red Hat Migration Toolkit for Applications 8.1",
          "product_id": "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64 as a component of Red Hat Migration Toolkit for Applications 8.1",
          "product_id": "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64 as a component of Red Hat Migration Toolkit for Applications 8.1",
          "product_id": "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64 as a component of Red Hat Migration Toolkit for Applications 8.1",
          "product_id": "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64 as a component of Red Hat Migration Toolkit for Applications 8.1",
          "product_id": "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64 as a component of Red Hat Migration Toolkit for Applications 8.1",
          "product_id": "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64 as a component of Red Hat Migration Toolkit for Applications 8.1",
          "product_id": "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64 as a component of Red Hat Migration Toolkit for Applications 8.1",
          "product_id": "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64 as a component of Red Hat Migration Toolkit for Applications 8.1",
          "product_id": "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-4926",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "discovery_date": "2026-03-26T20:03:28.427630+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451867"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw in `path-to-regexp` that can lead to a Denial of Service. The vulnerability occurs when specially crafted input containing multiple sequential optional groups is used to generate regular expressions, causing exponential resource consumption.\n\nThe Red Hat Advanced Cluster Security is not affected by this issue since it\u0027s shipping a `path-to-regexp` version which doesn\u0027t contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4926"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451867",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451867"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-4926",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-4926"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        }
      ],
      "release_date": "2026-03-26T18:59:38+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-04T17:05:10+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50300"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, limit the use of multiple sequential optional groups in route patterns within applications that use `path-to-regexp`. Additionally, avoid directly passing user-controlled input as route patterns to prevent the generation of maliciously crafted regular expressions.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions"
    },
    {
      "cve": "CVE-2026-12143",
      "cwe": {
        "id": "CWE-93",
        "name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
      },
      "discovery_date": "2026-06-12T19:00:57.360953+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2488480"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "form-data: form-data: Form field override via CRLF injection",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-12143"
        },
        {
          "category": "external",
          "summary": "RHBZ#2488480",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
        },
        {
          "category": "external",
          "summary": "https://cwe.mitre.org/data/definitions/93.html",
          "url": "https://cwe.mitre.org/data/definitions/93.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
          "url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
        },
        {
          "category": "external",
          "summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
          "url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
        },
        {
          "category": "external",
          "summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
          "url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
        },
        {
          "category": "external",
          "summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
          "url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
        },
        {
          "category": "external",
          "summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
          "url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
        },
        {
          "category": "external",
          "summary": "https://www.npmjs.com/package/form-data",
          "url": "https://www.npmjs.com/package/form-data"
        }
      ],
      "release_date": "2026-06-12T18:01:30.362000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-04T17:05:10+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50300"
        },
        {
          "category": "workaround",
          "details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "form-data: form-data: Form field override via CRLF injection"
    },
    {
      "cve": "CVE-2026-13149",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "discovery_date": "2026-06-30T10:00:59.843854+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2494813"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in brace-expansion, a widely-used npm package for expanding brace sequences. The expand() function exhibits exponential-time complexity when processing consecutive non-expanding brace groups. An attacker who can supply crafted input to expand(), directly or transitively via minimatch or glob, can cause significant CPU consumption and event-loop blocking, resulting in denial of service. The max option does not mitigate this issue, as it bounds the output size rather than the recursion work.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-13149"
        },
        {
          "category": "external",
          "summary": "RHBZ#2494813",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494813"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-13149",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-13149"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754",
          "url": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754"
        },
        {
          "category": "external",
          "summary": "https://www.npmjs.com/package/brace-expansion",
          "url": "https://www.npmjs.com/package/brace-expansion"
        }
      ],
      "release_date": "2026-06-30T08:30:34.502000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-04T17:05:10+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50300"
        },
        {
          "category": "workaround",
          "details": "There is no practical mitigation for this vulnerability. The brace-expansion package is typically a transitive dependency pulled in via minimatch and glob, making it difficult to isolate. Users should upgrade to a fixed version of brace-expansion when one becomes available.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity"
    },
    {
      "cve": "CVE-2026-25681",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-22T16:01:08.177603+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480761"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480761",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781703",
          "url": "https://go.dev/cl/781703"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79574",
          "url": "https://go.dev/issue/79574"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5029",
          "url": "https://pkg.go.dev/vuln/GO-2026-5029"
        }
      ],
      "release_date": "2026-05-22T15:01:21.975000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-04T17:05:10+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50300"
        },
        {
          "category": "workaround",
          "details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
    },
    {
      "cve": "CVE-2026-26996",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "discovery_date": "2026-02-20T04:01:11.896063+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2441268"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in minimatch. A remote attacker could exploit this Regular Expression Denial of Service (ReDoS) vulnerability by providing a specially crafted glob pattern. This pattern, containing numerous consecutive wildcard characters, causes excessive processing and exponential backtracking in the regular expression engine. Successful exploitation leads to a Denial of Service (DoS), making the application unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "minimatch: minimatch: Denial of Service via specially crafted glob patterns",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Exploitation of this flaw requires that a user or service processes untrusted input.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-26996"
        },
        {
          "category": "external",
          "summary": "RHBZ#2441268",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2441268"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-26996",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-26996"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-26996",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26996"
        },
        {
          "category": "external",
          "summary": "https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5",
          "url": "https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5"
        },
        {
          "category": "external",
          "summary": "https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26",
          "url": "https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26"
        }
      ],
      "release_date": "2026-02-20T03:05:21.105000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-04T17:05:10+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50300"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "minimatch: minimatch: Denial of Service via specially crafted glob patterns"
    },
    {
      "cve": "CVE-2026-27136",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-22T16:00:56.609820+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480757"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480757",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781685",
          "url": "https://go.dev/cl/781685"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79575",
          "url": "https://go.dev/issue/79575"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5030",
          "url": "https://pkg.go.dev/vuln/GO-2026-5030"
        }
      ],
      "release_date": "2026-05-22T15:01:22.111000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-04T17:05:10+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50300"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
    },
    {
      "cve": "CVE-2026-27904",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "discovery_date": "2026-02-26T02:01:23.004531+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2442922"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in minimatch. A remote attacker could exploit this vulnerability by providing a specially crafted glob expression with nested unbounded quantifiers. This could lead to catastrophic backtracking in the V8 JavaScript engine, causing the application to become unresponsive and resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Exploitation of this flaw requires that a user or service processes untrusted input.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27904"
        },
        {
          "category": "external",
          "summary": "RHBZ#2442922",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442922"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27904",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27904"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27904",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27904"
        },
        {
          "category": "external",
          "summary": "https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74",
          "url": "https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74"
        }
      ],
      "release_date": "2026-02-26T01:07:42.693000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-04T17:05:10+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50300"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions"
    },
    {
      "cve": "CVE-2026-33811",
      "cwe": {
        "id": "CWE-1341",
        "name": "Multiple Releases of Same Resource or Handle"
      },
      "discovery_date": "2026-05-07T20:01:34.913869+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467822"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33811"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467822",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/767860",
          "url": "https://go.dev/cl/767860"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78803",
          "url": "https://go.dev/issue/78803"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
          "url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4981",
          "url": "https://pkg.go.dev/vuln/GO-2026-4981"
        }
      ],
      "release_date": "2026-05-07T19:41:19.285000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-04T17:05:10+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50300"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
    },
    {
      "cve": "CVE-2026-39820",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-05-07T20:01:27.800929+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467820"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39820"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467820",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/759940",
          "url": "https://go.dev/cl/759940"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78566",
          "url": "https://go.dev/issue/78566"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
          "url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4986",
          "url": "https://pkg.go.dev/vuln/GO-2026-4986"
        }
      ],
      "release_date": "2026-05-07T19:41:19.854000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-04T17:05:10+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50300"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
    },
    {
      "cve": "CVE-2026-39821",
      "cwe": {
        "id": "CWE-1289",
        "name": "Improper Validation of Unsafe Equivalence in Input"
      },
      "discovery_date": "2026-05-22T16:00:52.844126+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480756"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480756",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/767220",
          "url": "https://go.dev/cl/767220"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78760",
          "url": "https://go.dev/issue/78760"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5026",
          "url": "https://pkg.go.dev/vuln/GO-2026-5026"
        }
      ],
      "release_date": "2026-05-22T15:01:21.462000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-04T17:05:10+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50300"
        },
        {
          "category": "workaround",
          "details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
    },
    {
      "cve": "CVE-2026-40895",
      "cwe": {
        "id": "CWE-212",
        "name": "Improper Removal of Sensitive Information Before Storage or Transfer"
      },
      "discovery_date": "2026-04-21T21:02:33.280553+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2460297"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-40895"
        },
        {
          "category": "external",
          "summary": "RHBZ#2460297",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460297"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-40895",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-40895"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895"
        },
        {
          "category": "external",
          "summary": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653",
          "url": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653"
        }
      ],
      "release_date": "2026-04-21T19:59:59.759000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-04T17:05:10+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50300"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects"
    },
    {
      "cve": "CVE-2026-42039",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-04-24T19:01:44.887156+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2461630"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Axios, a promise-based HTTP client for browsers and Node.js. This vulnerability occurs because the `toFormData` function recursively processes nested objects without a depth limit. A remote attacker can exploit this by sending deeply nested request data, which causes the Node.js process to crash due to a RangeError, leading to a potential Denial of Service (DoS) if the process crashes.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42039"
        },
        {
          "category": "external",
          "summary": "RHBZ#2461630",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461630"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42039",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42039"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42039",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42039"
        },
        {
          "category": "external",
          "summary": "https://github.com/axios/axios/security/advisories/GHSA-62hf-57xw-28j9",
          "url": "https://github.com/axios/axios/security/advisories/GHSA-62hf-57xw-28j9"
        }
      ],
      "release_date": "2026-04-24T18:01:30.775000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-04T17:05:10+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50300"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data"
    },
    {
      "cve": "CVE-2026-42041",
      "cwe": {
        "id": "CWE-915",
        "name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
      },
      "discovery_date": "2026-04-24T19:01:41.034289+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2461629"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to manipulate the `Object.prototype.validateStatus` property. By polluting this property, all HTTP error responses (such as 401, 403, or 500) are silently treated as successful responses. This can lead to a complete bypass of application-level authentication and error handling, potentially granting unauthorized access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "axios: Axios: Authentication bypass due to prototype pollution of HTTP error handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42041"
        },
        {
          "category": "external",
          "summary": "RHBZ#2461629",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461629"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42041",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42041"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42041",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42041"
        },
        {
          "category": "external",
          "summary": "https://github.com/axios/axios/security/advisories/GHSA-w9j2-pvgh-6h63",
          "url": "https://github.com/axios/axios/security/advisories/GHSA-w9j2-pvgh-6h63"
        }
      ],
      "release_date": "2026-04-24T17:55:30.036000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-04T17:05:10+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50300"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "axios: Axios: Authentication bypass due to prototype pollution of HTTP error handling"
    },
    {
      "cve": "CVE-2026-42044",
      "cwe": {
        "id": "CWE-915",
        "name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
      },
      "discovery_date": "2026-04-24T19:01:13.418725+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2461624"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution \"Gadget\" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42044"
        },
        {
          "category": "external",
          "summary": "RHBZ#2461624",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461624"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42044",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42044"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42044",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42044"
        },
        {
          "category": "external",
          "summary": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23",
          "url": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23"
        }
      ],
      "release_date": "2026-04-24T17:49:49.517000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-04T17:05:10+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50300"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget"
    },
    {
      "cve": "CVE-2026-42264",
      "cwe": {
        "id": "CWE-915",
        "name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
      },
      "discovery_date": "2026-05-08T04:02:21.039378+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467927"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system\u0027s object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "axios: Axios: Prototype pollution allows information disclosure and request manipulation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important prototype pollution flaw in Axios could result in information disclosure and network request manipulation. The vulnerability occurs when a co-located dependency in the application environment successfully pollutes the JavaScript `Object.prototype`. Under these conditions, Axios may unknowingly incorporate the manipulated properties into its outbound HTTP requests, potentially compromising data confidentiality and integrity. Exploitation is contingent on a prior successful prototype pollution attack from another component.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42264"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467927",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467927"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42264",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42264"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264"
        },
        {
          "category": "external",
          "summary": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa",
          "url": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa"
        },
        {
          "category": "external",
          "summary": "https://github.com/axios/axios/pull/10779",
          "url": "https://github.com/axios/axios/pull/10779"
        },
        {
          "category": "external",
          "summary": "https://github.com/axios/axios/releases/tag/v1.15.2",
          "url": "https://github.com/axios/axios/releases/tag/v1.15.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj",
          "url": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj"
        }
      ],
      "release_date": "2026-05-08T03:20:24.248000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-04T17:05:10+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50300"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "axios: Axios: Prototype pollution allows information disclosure and request manipulation"
    },
    {
      "cve": "CVE-2026-42342",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-06-02T20:02:09.305521+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484116"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in React Router and @remix-run/server-runtime. A remote attacker can exploit this vulnerability by sending certain crafted requests to the __manifest endpoint. This can lead to unbounded path expansion, consuming disproportionate server resources. The primary consequence is a denial of service (DoS), resulting in response time degradation and service unavailability for end users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "react-router: @remix-run/server-runtime: React Router / Remix: Denial of Service via unbounded path expansion in __manifest endpoint",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in React Router (Framework Mode) and Remix (@remix-run/server-runtime). Crafted requests to the __manifest endpoint can trigger unbounded path expansion, consuming disproportionate server resources and causing denial of service through response time degradation or complete service unavailability. This only affects applications using React Router Framework Mode or Remix server runtime; applications using Declarative Mode (BrowserRouter) or Data Mode (createBrowserRouter/RouterProvider) are not impacted. In Red Hat products, affected React Router components are used in internal console UIs that are deployed behind authenticated ingress, reducing the attack surface.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42342"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484116",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484116"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42342",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42342"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42342",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42342"
        },
        {
          "category": "external",
          "summary": "https://github.com/remix-run/react-router/security/advisories/GHSA-8x6r-g9mw-2r78",
          "url": "https://github.com/remix-run/react-router/security/advisories/GHSA-8x6r-g9mw-2r78"
        }
      ],
      "release_date": "2026-06-02T18:23:02.765000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-04T17:05:10+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50300"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\nUpgrade to a patched version to fully mitigate the issues (ref: https://github.com/remix-run/react-router/security/advisories/GHSA-8x6r-g9mw-2r78).",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "react-router: @remix-run/server-runtime: React Router / Remix: Denial of Service via unbounded path expansion in __manifest endpoint"
    },
    {
      "cve": "CVE-2026-42499",
      "cwe": {
        "id": "CWE-1046",
        "name": "Creation of Immutable Text Using String Concatenation"
      },
      "discovery_date": "2026-05-07T20:00:51.685602+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467809"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42499"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467809",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/771520",
          "url": "https://go.dev/cl/771520"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78987",
          "url": "https://go.dev/issue/78987"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
          "url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4977",
          "url": "https://pkg.go.dev/vuln/GO-2026-4977"
        }
      ],
      "release_date": "2026-05-07T19:41:18.615000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-04T17:05:10+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50300"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
    },
    {
      "cve": "CVE-2026-42504",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-06-02T23:01:00.320527+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484204"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42504"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484204",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/774481",
          "url": "https://go.dev/cl/774481"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79217",
          "url": "https://go.dev/issue/79217"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
          "url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5038",
          "url": "https://pkg.go.dev/vuln/GO-2026-5038"
        }
      ],
      "release_date": "2026-06-02T22:01:37.219000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-04T17:05:10+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50300"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
    },
    {
      "cve": "CVE-2026-44486",
      "cwe": {
        "id": "CWE-201",
        "name": "Insertion of Sensitive Information Into Sent Data"
      },
      "discovery_date": "2026-06-11T17:01:30.944384+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2487947"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44486"
        },
        {
          "category": "external",
          "summary": "RHBZ#2487947",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
        },
        {
          "category": "external",
          "summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
          "url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
        }
      ],
      "release_date": "2026-06-11T15:39:07.714000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-04T17:05:10+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50300"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
    },
    {
      "cve": "CVE-2026-44487",
      "cwe": {
        "id": "CWE-201",
        "name": "Insertion of Sensitive Information Into Sent Data"
      },
      "discovery_date": "2026-06-11T17:01:34.091476+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2487948"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44487"
        },
        {
          "category": "external",
          "summary": "RHBZ#2487948",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
        },
        {
          "category": "external",
          "summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
          "url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
        }
      ],
      "release_date": "2026-06-11T15:38:25.150000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-04T17:05:10+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50300"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
    },
    {
      "cve": "CVE-2026-44488",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-06-11T17:01:36.836488+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2487949"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44488"
        },
        {
          "category": "external",
          "summary": "RHBZ#2487949",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
        },
        {
          "category": "external",
          "summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
          "url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
        }
      ],
      "release_date": "2026-06-11T15:37:38.013000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-04T17:05:10+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50300"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
    },
    {
      "cve": "CVE-2026-44492",
      "cwe": {
        "id": "CWE-289",
        "name": "Authentication Bypass by Alternate Name"
      },
      "discovery_date": "2026-06-11T17:00:56.761751+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2487938"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44492"
        },
        {
          "category": "external",
          "summary": "RHBZ#2487938",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
        },
        {
          "category": "external",
          "summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
          "url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
        }
      ],
      "release_date": "2026-06-11T15:29:13.890000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-04T17:05:10+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50300"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
    },
    {
      "cve": "CVE-2026-44494",
      "cwe": {
        "id": "CWE-915",
        "name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
      },
      "discovery_date": "2026-06-11T17:01:12.945664+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2487942"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44494"
        },
        {
          "category": "external",
          "summary": "RHBZ#2487942",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
        },
        {
          "category": "external",
          "summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
          "url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
        }
      ],
      "release_date": "2026-06-11T15:32:03.155000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-04T17:05:10+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50300"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
    },
    {
      "cve": "CVE-2026-44495",
      "cwe": {
        "id": "CWE-915",
        "name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
      },
      "discovery_date": "2026-06-11T17:00:53.999811+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2487937"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44495"
        },
        {
          "category": "external",
          "summary": "RHBZ#2487937",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
        },
        {
          "category": "external",
          "summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
          "url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
        }
      ],
      "release_date": "2026-06-11T15:33:12.433000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-04T17:05:10+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50300"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
    },
    {
      "cve": "CVE-2026-44496",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "discovery_date": "2026-06-11T17:01:15.856386+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2487943"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44496"
        },
        {
          "category": "external",
          "summary": "RHBZ#2487943",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
        },
        {
          "category": "external",
          "summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
          "url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
        }
      ],
      "release_date": "2026-06-11T15:34:28.492000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-04T17:05:10+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50300"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
    },
    {
      "cve": "CVE-2026-55603",
      "cwe": {
        "id": "CWE-93",
        "name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
      },
      "discovery_date": "2026-06-22T21:01:20.731034+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2491525"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in http-proxy-middleware. A remote attacker could exploit a vulnerability in the fixRequestBody() function, which is used to re-emit a request body. By injecting carriage return and line feed characters (\\r\\n) into a request body key or value, an attacker can bypass security policies and validation performed by the proxy. This desynchronization between the proxy and the backend server can lead to a compromise of data integrity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "http-proxy-middleware: http-proxy-middleware: Data integrity compromise via CR/LF injection",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this issue as having Moderate impact for Red Hat OpenShift AI MLflow images that bundle http-proxy-middleware. Other Red Hat AI products are not affected or do not expose the vulnerable code path in normal operation.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
          "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-55603"
        },
        {
          "category": "external",
          "summary": "RHBZ#2491525",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491525"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-55603",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-55603"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55603",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55603"
        },
        {
          "category": "external",
          "summary": "https://github.com/chimurai/http-proxy-middleware/security/advisories/GHSA-gcq2-9pq2-cxqm",
          "url": "https://github.com/chimurai/http-proxy-middleware/security/advisories/GHSA-gcq2-9pq2-cxqm"
        }
      ],
      "release_date": "2026-06-22T20:07:05.034000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-04T17:05:10+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50300"
        },
        {
          "category": "workaround",
          "details": "Restrict network access to MLflow services. Do not pass untrusted user input into proxy target or header configuration. Upgrade http-proxy-middleware when updated packages are available.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64",
            "Red Hat Migration Toolkit for Applications 8.1:registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "http-proxy-middleware: http-proxy-middleware: Data integrity compromise via CR/LF injection"
    }
  ]
}