{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "A new version of Migration Toolkit for Applications (MTA) is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Migration Toolkit for Applications (MTA) accelerates large-scale application modernization efforts across hybrid cloud environments on Red Hat OpenShift. \nThis solution provides insight throughout the adoption process, at both the portfolio and application levels: inventory, assess, analyze, and manage\napplications for faster migration to OpenShift via the user interface.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:56347",
        "url": "https://access.redhat.com/errata/RHSA-2026:56347"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-47907",
        "url": "https://access.redhat.com/security/cve/CVE-2025-47907"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-53547",
        "url": "https://access.redhat.com/security/cve/CVE-2025-53547"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-58183",
        "url": "https://access.redhat.com/security/cve/CVE-2025-58183"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
        "url": "https://access.redhat.com/security/cve/CVE-2025-61729"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
        "url": "https://access.redhat.com/security/cve/CVE-2026-25681"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
        "url": "https://access.redhat.com/security/cve/CVE-2026-27136"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-44431",
        "url": "https://access.redhat.com/security/cve/CVE-2026-44431"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-44432",
        "url": "https://access.redhat.com/security/cve/CVE-2026-44432"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59885",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59885"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59886",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59886"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-8643",
        "url": "https://access.redhat.com/security/cve/CVE-2026-8643"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://developers.redhat.com/products/mta/overview",
        "url": "https://developers.redhat.com/products/mta/overview"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/migration_toolkit_for_applications/",
        "url": "https://docs.redhat.com/en/documentation/migration_toolkit_for_applications/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_56347.json"
      }
    ],
    "title": "Red Hat Security Advisory: Migration Toolkit for Applications",
    "tracking": {
      "current_release_date": "2026-08-20T10:03:52+00:00",
      "generator": {
        "date": "2026-08-20T10:03:52+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:56347",
      "initial_release_date": "2026-08-18T16:57:50+00:00",
      "revision_history": [
        {
          "date": "2026-08-18T16:57:50+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-18T16:58:05+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-20T10:03:52+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Migration Toolkit for Applications 8.2",
                "product": {
                  "name": "Red Hat Migration Toolkit for Applications 8.2",
                  "product_id": "Red Hat Migration Toolkit for Applications 8.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:migration_toolkit_applications:8.2::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Migration Toolkit for Applications"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
                  "product_id": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-analyzer-addon-rhel9@sha256%3A745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-analyzer-addon-rhel9\u0026tag=1786482470"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
                  "product_id": "registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-cli-rhel9@sha256%3A578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-cli-rhel9\u0026tag=1786484104"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
                  "product_id": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-discovery-addon-rhel9@sha256%3A23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-discovery-addon-rhel9\u0026tag=1786481485"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
                  "product_id": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-dotnet-external-provider-rhel9@sha256%3Ac5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-dotnet-external-provider-rhel9\u0026tag=1786481456"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
                  "product_id": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-go-external-provider-rhel9@sha256%3Ac559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-go-external-provider-rhel9\u0026tag=1786481499"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
                  "product_id": "registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-hub-rhel9@sha256%3A9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-hub-rhel9\u0026tag=1786482352"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
                  "product_id": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-java-external-provider-rhel9@sha256%3A85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-java-external-provider-rhel9\u0026tag=1786482819"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
                  "product_id": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-nodejs-external-provider-rhel9@sha256%3A27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-nodejs-external-provider-rhel9\u0026tag=1786481505"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
                  "product_id": "registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-rhel9-operator@sha256%3Ad7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-rhel9-operator\u0026tag=1786481481"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
                  "product_id": "registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-operator-bundle@sha256%3A46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-operator-bundle\u0026tag=1786485425"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
                  "product_id": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-platform-addon-rhel9@sha256%3Ad8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-platform-addon-rhel9\u0026tag=1786481489"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
                  "product_id": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-python-external-provider-rhel9@sha256%3Aa1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-python-external-provider-rhel9\u0026tag=1786481563"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
                  "product_id": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-solution-server-rhel9@sha256%3A673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-solution-server-rhel9\u0026tag=1786481476"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
                  "product_id": "registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-ui-rhel9@sha256%3A0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-ui-rhel9\u0026tag=1786481558"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
                  "product_id": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-analyzer-addon-rhel9@sha256%3A217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-analyzer-addon-rhel9\u0026tag=1786482470"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
                  "product_id": "registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-cli-rhel9@sha256%3A98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-cli-rhel9\u0026tag=1786484104"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
                  "product_id": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-discovery-addon-rhel9@sha256%3A711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-discovery-addon-rhel9\u0026tag=1786481485"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
                  "product_id": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-dotnet-external-provider-rhel9@sha256%3A064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-dotnet-external-provider-rhel9\u0026tag=1786481456"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
                  "product_id": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-go-external-provider-rhel9@sha256%3A1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-go-external-provider-rhel9\u0026tag=1786481499"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
                  "product_id": "registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-hub-rhel9@sha256%3Aec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-hub-rhel9\u0026tag=1786482352"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
                  "product_id": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-java-external-provider-rhel9@sha256%3A21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-java-external-provider-rhel9\u0026tag=1786482819"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
                  "product_id": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-nodejs-external-provider-rhel9@sha256%3A9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-nodejs-external-provider-rhel9\u0026tag=1786481505"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
                  "product_id": "registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-rhel9-operator@sha256%3A923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-rhel9-operator\u0026tag=1786481481"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
                  "product_id": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-platform-addon-rhel9@sha256%3A881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-platform-addon-rhel9\u0026tag=1786481489"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
                  "product_id": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-python-external-provider-rhel9@sha256%3Aaa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-python-external-provider-rhel9\u0026tag=1786481563"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
                  "product_id": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-solution-server-rhel9@sha256%3A67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-solution-server-rhel9\u0026tag=1786481476"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64",
                  "product_id": "registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-ui-rhel9@sha256%3A23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-ui-rhel9\u0026tag=1786481558"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-47907",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "discovery_date": "2025-08-07T16:01:06.247481+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2387083"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in database/sql. Concurrent queries can produce unexpected results when a query is cancelled during a Scan method call on returned Rows, creating a race condition. This vulnerability allows an attacker who can initiate and cancel queries to trigger this condition, possibly leading to inconsistent data being returned to the application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "database/sql: Postgres Scan Race Condition",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability marked as Moderate severity issues rather than Important. The os/exec LookPath flaw requires a misconfigured PATH to be exploitable, and the database/sql race condition primarily impacts applications that cancel queries while running multiple queries concurrently. Both can cause unexpected behavior, but the exploitation scope is limited and unlikely to result in direct compromise in most typical deployments.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-47907"
        },
        {
          "category": "external",
          "summary": "RHBZ#2387083",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2387083"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-47907",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-47907"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47907",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47907"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/693735",
          "url": "https://go.dev/cl/693735"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/74831",
          "url": "https://go.dev/issue/74831"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/x5MKroML2yM",
          "url": "https://groups.google.com/g/golang-announce/c/x5MKroML2yM"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2025-3849",
          "url": "https://pkg.go.dev/vuln/GO-2025-3849"
        }
      ],
      "release_date": "2025-08-07T15:25:30.704000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-18T16:57:50+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:56347"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "database/sql: Postgres Scan Race Condition"
    },
    {
      "cve": "CVE-2025-53547",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "discovery_date": "2025-07-08T22:01:16.594090+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2378905"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A command injection vulnerability has been identified in Helm, a package manager for Kubernetes. An attacker can craft a malicious Chart.yaml file with specially linked dependencies in a Chart.lock file. If the Chart.lock file is a symbolic link to an executable file, such as a shell script, and a user attempts to update the dependencies, the crafted content is written to the symlinked file and executed. This can lead to local code execution on the system. This issue has been patched in Helm version 3.18.4, and users should update to this version to mitigate the risk.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "helm.sh/helm/v3: Helm Chart Code Execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Although GitOps ships Helm, this product is not vulnerable to this vulnerability as ArgoCD doesn\u0027t use helm dependency update. Additionally ArgoCD scans the whole repository searching for symbolic links that eventually points to a out of bounds destination, this later feature ensures ArgoCD is not vulnerable for this issue. Given this information ArgoCD won\u0027t be updated to pull a new version of Helm in other versions than the currently latest upstream one.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-53547"
        },
        {
          "category": "external",
          "summary": "RHBZ#2378905",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2378905"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-53547",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-53547"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-53547",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-53547"
        },
        {
          "category": "external",
          "summary": "https://github.com/helm/helm/commit/4b8e61093d8f579f1165cdc6bd4b43fa5455f571",
          "url": "https://github.com/helm/helm/commit/4b8e61093d8f579f1165cdc6bd4b43fa5455f571"
        },
        {
          "category": "external",
          "summary": "https://github.com/helm/helm/security/advisories/GHSA-557j-xg8c-q2mm",
          "url": "https://github.com/helm/helm/security/advisories/GHSA-557j-xg8c-q2mm"
        }
      ],
      "release_date": "2025-07-08T21:39:59.075000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-18T16:57:50+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:56347"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "helm.sh/helm/v3: Helm Chart Code Execution"
    },
    {
      "cve": "CVE-2025-58183",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2025-10-29T23:01:50.573951+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2407258"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to be able to process a specially crafted GNU tar pax 1.0 archive with the application using the archive/tar package. Additionally, this issue can cause the Go application to allocate a large amount of memory, eventually leading to an out-of-memory condition and resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-58183"
        },
        {
          "category": "external",
          "summary": "RHBZ#2407258",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407258"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-58183",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-58183"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/709861",
          "url": "https://go.dev/cl/709861"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/75677",
          "url": "https://go.dev/issue/75677"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
          "url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2025-4014",
          "url": "https://pkg.go.dev/vuln/GO-2025-4014"
        }
      ],
      "release_date": "2025-10-29T22:10:14.376000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-18T16:57:50+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:56347"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map"
    },
    {
      "cve": "CVE-2025-61729",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2025-12-02T20:01:45.330964+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2418462"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-61729"
        },
        {
          "category": "external",
          "summary": "RHBZ#2418462",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/725920",
          "url": "https://go.dev/cl/725920"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/76445",
          "url": "https://go.dev/issue/76445"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
          "url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2025-4155",
          "url": "https://pkg.go.dev/vuln/GO-2025-4155"
        }
      ],
      "release_date": "2025-12-02T18:54:10.166000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-18T16:57:50+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:56347"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
    },
    {
      "acknowledgments": [
        {
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2026-8643",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-04-22T23:09:35+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2460927"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in pip, the package installer for Python. A remote attacker can exploit this vulnerability by tricking a victim into installing a malicious Python wheel. This wheel contains specially crafted entry-point names that use directory traversal or absolute paths. This allows pip to write generated script wrappers outside the intended installation directory, leading to arbitrary file overwrite. This can severely impact system integrity and availability, and in certain scenarios, may lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important flaw in pip\u0027s wheel installation process allows for arbitrary file overwrite due to path traversal. An attacker could exploit this by convincing a user to install a specially crafted malicious Python wheel. While file overwrites are limited to the installing user\u0027s permissions, using `pip install` with elevated privileges in Red Hat environments significantly increases the potential impact, potentially leading to system integrity compromise or arbitrary code execution.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-8643"
        },
        {
          "category": "external",
          "summary": "RHBZ#2460927",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460927"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-8643",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-8643"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-8643",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8643"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/pip/commit/8eb178480bd1a2b223f509fc430796b265158dfb",
          "url": "https://github.com/pypa/pip/commit/8eb178480bd1a2b223f509fc430796b265158dfb"
        }
      ],
      "release_date": "2026-05-27T17:03:36.585000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-18T16:57:50+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:56347"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, users should avoid installing Python wheels from untrusted sources. It is strongly advised against using `pip install` with elevated privileges, such as `sudo`, when installing wheels. Additionally, administrators should inspect `entry_points.txt` within wheels for path separators or absolute paths before installation.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite"
    },
    {
      "cve": "CVE-2026-25681",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-22T16:01:08.177603+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480761"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480761",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781703",
          "url": "https://go.dev/cl/781703"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79574",
          "url": "https://go.dev/issue/79574"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5029",
          "url": "https://pkg.go.dev/vuln/GO-2026-5029"
        }
      ],
      "release_date": "2026-05-22T15:01:21.975000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-18T16:57:50+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:56347"
        },
        {
          "category": "workaround",
          "details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
    },
    {
      "cve": "CVE-2026-27136",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-22T16:00:56.609820+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480757"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480757",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781685",
          "url": "https://go.dev/cl/781685"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79575",
          "url": "https://go.dev/issue/79575"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5030",
          "url": "https://pkg.go.dev/vuln/GO-2026-5030"
        }
      ],
      "release_date": "2026-05-22T15:01:22.111000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-18T16:57:50+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:56347"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
    },
    {
      "cve": "CVE-2026-44431",
      "cwe": {
        "id": "CWE-201",
        "name": "Insertion of Sensitive Information Into Sent Data"
      },
      "discovery_date": "2026-05-13T17:01:41.663622+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477167"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in urllib3, an HTTP client library for Python. When using the low-level API via `ProxyManager.connection_from_url().urlopen()` with `assert_same_host=False`, cross-origin redirects can still forward sensitive headers. This could allow a remote attacker to gain unauthorized access to sensitive information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44431"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477167",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477167"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44431",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44431"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44431",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44431"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc",
          "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc"
        }
      ],
      "release_date": "2026-05-13T15:20:24.588000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-18T16:57:50+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:56347"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers"
    },
    {
      "cve": "CVE-2026-44432",
      "cwe": {
        "id": "CWE-409",
        "name": "Improper Handling of Highly Compressed Data (Data Amplification)"
      },
      "discovery_date": "2026-05-13T17:01:01.083841+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477154"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44432"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477154",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477154"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44432",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44432"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j",
          "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j"
        }
      ],
      "release_date": "2026-05-13T15:17:12.611000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-18T16:57:50+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:56347"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression"
    },
    {
      "cve": "CVE-2026-59885",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-07-14T18:17:12.157807+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500380"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in pyasn1, a Python library for Abstract Syntax Notation One (ASN.1). The BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A remote attacker could exploit this by providing a specially crafted payload containing an OID with many arcs, leading to excessive CPU consumption and a denial of service (DoS) in applications that decode untrusted ASN.1 data. The corresponding encoders also exhibit this quadratic behavior when re-encoding attacker-supplied values.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in pyasn1. The BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A small crafted payload containing an OID with many arcs consumes excessive CPU per decode() call, allowing denial of service in applications that decode untrusted ASN.1 data (certificates, LDAP, SNMP, Kerberos). The corresponding encoders exhibit the same behavior when re-encoding attacker-supplied values. The arc-size limit introduced for CVE-2026-23490 does not mitigate this issue. This issue is fixed in pyasn1 version 0.6.4.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59885"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500380",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500380"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59885",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59885"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59885",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59885"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9",
          "url": "https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4",
          "url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj",
          "url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj"
        }
      ],
      "release_date": "2026-07-14T16:40:00.515000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-18T16:57:50+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:56347"
        },
        {
          "category": "workaround",
          "details": "Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) \u2014 an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER"
    },
    {
      "cve": "CVE-2026-59886",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-07-14T17:01:19.689422+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500041"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption, leading to a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in pyasn1, rated as Important, could lead to a denial of service in Red Hat products that process untrusted ASN.1 data. A remote attacker could send a specially crafted BER, CER, or DER encoded REAL value with a large exponent, causing applications to consume excessive resources during decoding operations such as printing, logging, or arithmetic, thereby rendering the service unavailable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59886"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500041",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500041"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59886",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59886"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59886",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59886"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/commit/e60c691cb91addb8fcefa2f537e85ede6fb1e886",
          "url": "https://github.com/pyasn1/pyasn1/commit/e60c691cb91addb8fcefa2f537e85ede6fb1e886"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4",
          "url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-hm4w-wwcw-mr6r",
          "url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-hm4w-wwcw-mr6r"
        }
      ],
      "release_date": "2026-07-14T16:38:29.691000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-18T16:57:50+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:56347"
        },
        {
          "category": "workaround",
          "details": "When processing untrusted ASN.1 data with pyasn1, avoid calling prettyPrint(), str(), float(), int(), or performing comparisons or arithmetic on decoded Real (ASN.1 REAL type) objects. Instead, inspect the raw (mantissa, base, exponent) tuple directly. Where logging decoded ASN.1 structures is necessary, filter out or sanitize Real-typed values before conversion.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:578edd839979fafbc8648a1cbe508263285b39e765e6a8d8be51e47d2f02f338_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:1708f82dc5ee43752afb8a43f859c821619d2f351935b0124a080859e78563d7_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c559e696d4a93e407bb99558abccedc6c20d40478c8cee2395672bc6b9868c09_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:881fe8805b1a6b255dc5a9dfd1dff9757c432d1d94ecfa4db38505a332f29376_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:a1545456691e4f3cf20e1ff084df38918bca04e20c6be889e6c2b993252a29c4_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:673a421ba816f250d4a73168ce016416c4040f6fef01b777e2ff682e12b4f44c_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:23f68bb5ba586f82c05e8a49b0adf2164acf8eca7dd34dedb226ca4f8c23019e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values"
    }
  ]
}