RHSA-2026:63385

Vulnerability from csaf_redhat - Published: 2026-09-03 23:00 - Updated: 2026-09-25 13:01
Summary
Red Hat Security Advisory: Satellite 6.19.4 Async Update
Severity
Important
Notes
Topic: A new release is now available for Red Hat Satellite 6.19 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Security Fix(es): * ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution (CVE-2026-11332) * ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for CVE-2026-11332) (CVE-2026-16493) * openvox-server: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512) * puppetserver: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512) * rubygem-jwt: ruby-jwt: Authentication bypass due to empty key in HMAC verification (CVE-2026-45363) * python-aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses (CVE-2026-69244) * python-aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade (CVE-2026-69243) * python-aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load() (CVE-2026-34993) * openvox-server: jackson-core: Denial of Service via incomplete fix in async JSON parser (CVE-2026-68494) * openvox-server: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections (CVE-2026-10051) * python-gitpython: GitPython: Arbitrary File Overwrite via improper git option validation (CVE-2026-73624) * python-gitpython: GitPython: Remote Code Execution via kwarg value smuggling (CVE-2026-73625) * python-gitpython: GitPython: Information disclosure via environment variable expansion in URL handling (CVE-2026-73622) * python-gitpython: GitPython: Remote Code Execution via malicious Git template (CVE-2026-73623) * python-gitpython: GitPython: Arbitrary file overwrite and read via unsafe git option forwarding (CVE-2026-73620) * python-gitpython: GitPython: Arbitrary code execution via improper validation of clone options (CVE-2026-42284) * python3.12-gitpython: GitPython: Arbitrary code execution via improper validation of clone options (CVE-2026-42284) * python-gitpython: GitPython: Arbitrary command execution due to bypass of dangerous Git option checks (CVE-2026-42215) * python3.12-gitpython: GitPython: Arbitrary command execution due to bypass of dangerous Git option checks (CVE-2026-42215) * python-gitpython: GitPython: Arbitrary code execution via injected newlines in Git configuration (CVE-2026-44244) * python3.12-gitpython: GitPython: Arbitrary code execution via injected newlines in Git configuration (CVE-2026-44244) * python-gitpython: GitPython: Arbitrary file creation via path traversal in .gitmodules submodule names (CVE-2026-76222) * python3.12-gitpython: GitPython: Arbitrary file creation via path traversal in .gitmodules submodule names (CVE-2026-76222) * python-gitpython: GitPython: Remote Code Execution via malicious Git hooks (CVE-2026-76218) * python3.12-gitpython: GitPython: Remote Code Execution via malicious Git hooks (CVE-2026-76218) * python-gitpython: GitPython: Arbitrary command execution via crafted kwargs (CVE-2026-76220) * python3.12-gitpython: GitPython: Arbitrary command execution via crafted kwargs (CVE-2026-76220) * python-gitpython: GitPython: Arbitrary File Overwrite via `git read-tree` option injection (CVE-2026-76219) * python3.12-gitpython: GitPython: Arbitrary File Overwrite via `git read-tree` option injection (CVE-2026-76219) * python-gitpython: GitPython: Arbitrary code execution via config-name injection (CVE-2026-76221) * python3.12-gitpython: GitPython: Arbitrary code execution via config-name injection (CVE-2026-76221)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

A flaw was found in Eclipse Jetty. This vulnerability allows a remote attacker to cause the server to retain HTTP/1.1 request trailers from a prior connection. Consequently, subsequent requests made over the same connection may unintentionally disclose information by reporting the previously retained trailers, or a combination of previous and current request trailers.

CWE-201 - Insertion of Sensitive Information Into Sent Data
Affected products
Product Identifier Version Remediation
Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 —
Workaround
Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 —
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 —
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 —
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch —
Workaround
Threats
Impact Moderate

A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field. This allows arbitrary code execution on the machine of a user who installs the role via ansible-galaxy role install.

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Affected products
Product Identifier Version Remediation
Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 —
Workaround
Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 —
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 —
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 —
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch —
Workaround
Threats
Impact Important

A flaw was found in ansible-core. The _extract_collection_from_git() function in ansible-core's concrete_artifact_manager.py constructs git clone commands without a '--' (end-of-options) separator before user-supplied URLs when installing collections from git sources. An attacker who provides a crafted collection source URI containing git argument injection payloads can achieve arbitrary command execution when a user runs 'ansible-galaxy collection install' with the malicious source. This is an incomplete fix for CVE-2026-11332, which hardened the role install path but missed the equivalent collection install code path.

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Affected products
Fixed 8 products, the same list as for CVE-2026-11332
Known not affected 81 products, the same list as for CVE-2026-11332
Threats
Impact Important

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the `CookieJar.load()` function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicious code on the affected system. This issue is most likely to occur in applications that allow attacker-controlled files to be loaded.

CWE-502 - Deserialization of Untrusted Data
Affected products
Product Identifier Version Remediation
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 —
Workaround
Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch —
Workaround
Threats
Impact Important

A flaw was found in GitPython, a Python library used to interact with Git repositories. This vulnerability allows an attacker to achieve arbitrary command execution by providing specially crafted arguments (kwargs) to functions such as Repo.clone_from(), Remote.fetch(), Remote.pull(), or Remote.push(). This bypasses existing security checks designed to block dangerous Git options, enabling the execution of unauthorized commands.

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Affected products
Product Identifier Version Remediation
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 —
Workaround
Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 —
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 —
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 —
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src —
Workaround
Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch —
Workaround
Threats
Impact Important

A flaw was found in GitPython, a Python library for interacting with Git repositories. A remote attacker could exploit an input validation vulnerability in the `_clone()` function. By crafting a malicious string in the `multi_options` parameter, an attacker could bypass validation. This allows for the injection of arbitrary Git configurations, such as `core.hooksPath`, leading to the execution of attacker-controlled hooks and ultimately, arbitrary code execution during a clone operation.

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Affected products
Fixed 4 products, the same list as for CVE-2026-42215
Known not affected 85 products, the same list as for CVE-2026-42215
Threats
Impact Important

A flaw was found in GitPython, a Python library used to interact with Git repositories. The `GitConfigParser.set_value()` function does not properly validate input for newlines. This vulnerability allows an attacker to inject malicious configuration settings, specifically the `core.hooksPath`, into a Git repository. Consequently, any Git operation that triggers hooks, such as committing or merging, could lead to arbitrary code execution from an attacker-controlled path.

CWE-1286 - Improper Validation of Syntactic Correctness of Input
Affected products
Fixed 4 products, the same list as for CVE-2026-42215
Known not affected 85 products, the same list as for CVE-2026-42215
Threats
Impact Important

A flaw was found in ruby-jwt, a Ruby implementation of the RFC 7519 OAuth JSON Web Token (JWT) standard. A remote attacker can exploit this vulnerability by crafting a malicious token that is accepted due to an empty key being used in the HMAC (Hash-based Message Authentication Code) digest calculation during token verification. This allows the attacker to bypass authentication and integrity checks, potentially leading to unauthorized access or data manipulation.

CWE-347 - Improper Verification of Cryptographic Signature
Affected products
Product Identifier Version Remediation
Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch —
Vendor Fix fix
Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src —
Vendor Fix fix
Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch —
Vendor Fix fix
Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src —
Vendor Fix fix
Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch —
Vendor Fix fix
Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src —
Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src —
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src —
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src —
Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 —
Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src —
Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch —
Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src —
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src —
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 —
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 —
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 —
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch —
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src —
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch —
Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src —
Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src —
Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src —
Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src —
Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src —
Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src —
Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src —
Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src —
Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src —
Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src —
Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 —
Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src —
Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch —
Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src —
Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src —
Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 —
Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 —
Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 —
Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch —
Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src —
Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch —
Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src —
Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src —
Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src —
Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src —
Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src —
Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch —
Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src —
Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch —
Threats
Impact Important

A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator (PTV) when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic type parameter of an allowed container. This leads to the loading and instantiation of arbitrary classes, potentially resulting in arbitrary code execution.

CWE-502 - Deserialization of Untrusted Data
Affected products
Fixed 4 products, the same list as for CVE-2026-10051
Known not affected 85 products, the same list as for CVE-2026-10051
Threats
Impact Important

A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This uncontrolled memory growth can lead to a denial of service (DoS) by exhausting the Java Virtual Machine (JVM) heap.

CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 4 products, the same list as for CVE-2026-10051
Known not affected 85 products, the same list as for CVE-2026-10051
Threats
Impact Important

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability allows a remote attacker to perform HTTP request smuggling due to an edge case in the WebSocket upgrade procedure. When a WebSocket upgrade request includes a body, the parser may switch protocols before the entire body is received. This leaves trailing data to be processed incorrectly, potentially enabling an attacker to bypass security mechanisms or gain unauthorized access to resources.

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
Affected products
Fixed 8 products, the same list as for CVE-2026-34993
Known not affected 81 products, the same list as for CVE-2026-34993
Threats
Impact Moderate

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability involves an out-of-bounds heap read in the C response parser when processing malformed HTTP responses. An attacker operating a malicious server, or even an accidental malformed response, could exploit this to trigger a Denial of Service (DoS) in the client application, making it unavailable.

CWE-125 - Out-of-bounds Read
Affected products
Fixed 8 products, the same list as for CVE-2026-34993
Known not affected 81 products, the same list as for CVE-2026-34993
Threats
Impact Important

A flaw was found in GitPython. This vulnerability arises from insufficient guarding of git option forwarding within the `IndexFile.checkout()` and `TagReference.create()` functions. An authenticated attacker can exploit this by passing unsafe options through keyword arguments, leading to the ability to overwrite arbitrary files with repository content or read sensitive files. This could result in significant data integrity and confidentiality impacts.

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Affected products
Fixed 8 products, the same list as for CVE-2026-34993
Known not affected 81 products, the same list as for CVE-2026-34993
Threats
Impact Important

A flaw was found in GitPython. This vulnerability allows a remote attacker to exfiltrate sensitive information, such as environment variables, by crafting malicious URLs. When these URLs are processed during Git operations like fetch or pull, the environment variables are expanded and transmitted to attacker-controlled hosts, leading to information disclosure.

CWE-914 - Improper Control of Dynamically-Identified Variables
Affected products
Fixed 4 products, the same list as for CVE-2026-42215
Known not affected 85 products, the same list as for CVE-2026-42215
Threats
Impact Important

A flaw was found in GitPython. An incomplete denylist in the `unsafe_git_clone_options` function fails to restrict the `--template` option. This allows a remote attacker to supply a malicious Git template directory, leading to arbitrary command execution during clone operations.

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products
Fixed 4 products, the same list as for CVE-2026-42215
Known not affected 85 products, the same list as for CVE-2026-42215
Threats
Impact Important

A flaw was found in GitPython. This vulnerability allows a remote attacker to overwrite arbitrary files on the system. By failing to properly validate git options passed to the `Diffable.diff` method, an attacker can supply a malicious output argument to write patch content to attacker-controlled file paths, leading to potential system compromise.

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Affected products
Fixed 4 products, the same list as for CVE-2026-42215
Known not affected 85 products, the same list as for CVE-2026-42215
Threats
Impact Important

A flaw was found in GitPython. Attackers can bypass the `check_unsafe_options` guard by smuggling git options within single-character keyword argument (kwarg) values. This allows them to supply specially crafted option dictionaries to various GitPython methods, such as `clone_from` or `fetch`, leading to arbitrary code execution.

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products
Fixed 4 products, the same list as for CVE-2026-42215
Known not affected 85 products, the same list as for CVE-2026-42215
Threats
Impact Important

A flaw was found in GitPython. This vulnerability allows a remote attacker to achieve arbitrary code execution. By supplying a specially crafted template parameter to the `Repo.init` function, an attacker can point to a directory containing malicious Git hooks. When Git operations are performed on the initialized repository, these hooks execute arbitrary code, leading to a complete compromise of the affected system.

CWE-94 - Improper Control of Generation of Code ('Code Injection')
Affected products
Fixed 4 products, the same list as for CVE-2026-42215
Known not affected 85 products, the same list as for CVE-2026-42215
Threats
Impact Important

A flaw was found in GitPython. This vulnerability allows an attacker to overwrite arbitrary files on the system. By injecting specific options into the `git read-tree` command through methods like `IndexFile.from_tree`, `IndexFile.reset`, and `IndexFile.merge_tree`, without proper option validation or argument separation, an attacker can cause the application to write a git-index blob to any attacker-controlled writable path, leading to data destruction.

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Affected products
Fixed 4 products, the same list as for CVE-2026-42215
Known not affected 85 products, the same list as for CVE-2026-42215
Threats
Impact Important

A flaw was found in GitPython. A remote attacker can bypass the `check_unsafe_options` guard by combining a single-character keyword argument with `split_single_char_options=False`. This allows the attacker to supply a crafted dictionary of keyword arguments to guarded methods, such as `clone_from`, leading to arbitrary operating system command execution.

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products
Fixed 4 products, the same list as for CVE-2026-42215
Known not affected 85 products, the same list as for CVE-2026-42215
Threats
Impact Important

A flaw was found in GitPython. This vulnerability allows attackers to inject malicious configuration options by manipulating option names within the option-name validator. By injecting special characters, an attacker can forge arbitrary git-config directives, potentially leading to arbitrary code execution on the system when a git operation is performed.

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products
Fixed 4 products, the same list as for CVE-2026-42215
Known not affected 85 products, the same list as for CVE-2026-42215
Threats
Impact Important

A flaw was found in GitPython where it fails to properly validate submodule names within .gitmodules files. A remote attacker could craft a malicious Git repository containing specially formed submodule names with directory traversal sequences. When GitPython processes these malicious submodule names during repository initialization, it could lead to the creation of attacker-controlled Git repositories at arbitrary locations on the filesystem, potentially impacting system integrity.

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products
Fixed 4 products, the same list as for CVE-2026-42215
Known not affected 85 products, the same list as for CVE-2026-42215
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:63385 self
https://access.redhat.com/security/updates/classi… external
https://issues.redhat.com/browse/SAT-45592 external
https://issues.redhat.com/browse/SAT-46105 external
https://issues.redhat.com/browse/SAT-48574 external
https://issues.redhat.com/browse/SAT-48584 external
https://issues.redhat.com/browse/SAT-48585 external
https://issues.redhat.com/browse/SAT-48586 external
https://issues.redhat.com/browse/SAT-48587 external
https://issues.redhat.com/browse/SAT-48588 external
https://issues.redhat.com/browse/SAT-48589 external
https://issues.redhat.com/browse/SAT-48628 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-10051 self
https://bugzilla.redhat.com/show_bug.cgi?id=2499928 external
https://www.cve.org/CVERecord?id=CVE-2026-10051 external
https://nvd.nist.gov/vuln/detail/CVE-2026-10051 external
https://gitlab.eclipse.org/security/cve-assignmen… external
https://access.redhat.com/security/cve/CVE-2026-11332 self
https://bugzilla.redhat.com/show_bug.cgi?id=2485379 external
https://www.cve.org/CVERecord?id=CVE-2026-11332 external
https://nvd.nist.gov/vuln/detail/CVE-2026-11332 external
https://github.com/ansible/ansible external
https://access.redhat.com/security/cve/CVE-2026-16493 self
https://bugzilla.redhat.com/show_bug.cgi?id=2503724 external
https://www.cve.org/CVERecord?id=CVE-2026-16493 external
https://nvd.nist.gov/vuln/detail/CVE-2026-16493 external
https://access.redhat.com/security/cve/CVE-2026-34993 self
https://bugzilla.redhat.com/show_bug.cgi?id=2484099 external
https://www.cve.org/CVERecord?id=CVE-2026-34993 external
https://nvd.nist.gov/vuln/detail/CVE-2026-34993 external
https://github.com/aio-libs/aiohttp/commit/dcf40f… external
https://github.com/aio-libs/aiohttp/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-42215 self
https://bugzilla.redhat.com/show_bug.cgi?id=2467802 external
https://www.cve.org/CVERecord?id=CVE-2026-42215 external
https://nvd.nist.gov/vuln/detail/CVE-2026-42215 external
https://github.com/gitpython-developers/GitPython… external
https://github.com/gitpython-developers/GitPython… external
https://access.redhat.com/security/cve/CVE-2026-42284 self
https://bugzilla.redhat.com/show_bug.cgi?id=2467800 external
https://www.cve.org/CVERecord?id=CVE-2026-42284 external
https://nvd.nist.gov/vuln/detail/CVE-2026-42284 external
https://github.com/gitpython-developers/GitPython… external
https://access.redhat.com/security/cve/CVE-2026-44244 self
https://bugzilla.redhat.com/show_bug.cgi?id=2467804 external
https://www.cve.org/CVERecord?id=CVE-2026-44244 external
https://nvd.nist.gov/vuln/detail/CVE-2026-44244 external
https://github.com/gitpython-developers/GitPython… external
https://github.com/gitpython-developers/GitPython… external
https://access.redhat.com/security/cve/CVE-2026-45363 self
https://bugzilla.redhat.com/show_bug.cgi?id=2500739 external
https://www.cve.org/CVERecord?id=CVE-2026-45363 external
https://nvd.nist.gov/vuln/detail/CVE-2026-45363 external
https://github.com/jwt/ruby-jwt/commit/9820020869… external
https://github.com/jwt/ruby-jwt/commit/db560b769a… external
https://github.com/jwt/ruby-jwt/releases/tag/v2.10.3 external
https://github.com/jwt/ruby-jwt/releases/tag/v3.2.0 external
https://github.com/jwt/ruby-jwt/security/advisori… external
https://access.redhat.com/security/cve/CVE-2026-54512 self
https://bugzilla.redhat.com/show_bug.cgi?id=2492015 external
https://www.cve.org/CVERecord?id=CVE-2026-54512 external
https://nvd.nist.gov/vuln/detail/CVE-2026-54512 external
https://github.com/FasterXML/jackson-databind/com… external
https://github.com/FasterXML/jackson-databind/iss… external
https://github.com/FasterXML/jackson-databind/sec… external
https://access.redhat.com/security/cve/CVE-2026-68494 self
https://bugzilla.redhat.com/show_bug.cgi?id=2511026 external
https://www.cve.org/CVERecord?id=CVE-2026-68494 external
https://nvd.nist.gov/vuln/detail/CVE-2026-68494 external
https://github.com/FasterXML/jackson-core/commit/… external
https://github.com/FasterXML/jackson-core/commit/… external
https://github.com/FasterXML/jackson-core/commit/… external
https://github.com/FasterXML/jackson-core/pull/1611 external
https://github.com/FasterXML/jackson-core/securit… external
https://github.com/advisories/GHSA-72hv-8253-57qq external
https://www.cve.org/CVERecord?id=CVE-2026-18401 external
https://access.redhat.com/security/cve/CVE-2026-69243 self
https://bugzilla.redhat.com/show_bug.cgi?id=2510831 external
https://www.cve.org/CVERecord?id=CVE-2026-69243 external
https://nvd.nist.gov/vuln/detail/CVE-2026-69243 external
https://github.com/aio-libs/aiohttp/commit/6ae358… external
https://github.com/aio-libs/aiohttp/pull/13017 external
https://github.com/aio-libs/aiohttp/releases/tag/… external
https://github.com/aio-libs/aiohttp/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-69244 self
https://bugzilla.redhat.com/show_bug.cgi?id=2510825 external
https://www.cve.org/CVERecord?id=CVE-2026-69244 external
https://nvd.nist.gov/vuln/detail/CVE-2026-69244 external
https://github.com/aio-libs/aiohttp/commit/49f65d… external
https://github.com/aio-libs/aiohttp/pull/13223 external
https://github.com/aio-libs/aiohttp/releases/tag/… external
https://github.com/aio-libs/aiohttp/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-73620 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515261 external
https://www.cve.org/CVERecord?id=CVE-2026-73620 external
https://nvd.nist.gov/vuln/detail/CVE-2026-73620 external
https://github.com/gitpython-developers/GitPython… external
https://www.vulncheck.com/advisories/gitpython-be… external
https://access.redhat.com/security/cve/CVE-2026-73622 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515269 external
https://www.cve.org/CVERecord?id=CVE-2026-73622 external
https://nvd.nist.gov/vuln/detail/CVE-2026-73622 external
https://github.com/gitpython-developers/GitPython… external
https://github.com/gitpython-developers/GitPython… external
https://www.vulncheck.com/advisories/gitpython-be… external
https://access.redhat.com/security/cve/CVE-2026-73623 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515275 external
https://www.cve.org/CVERecord?id=CVE-2026-73623 external
https://nvd.nist.gov/vuln/detail/CVE-2026-73623 external
https://github.com/gitpython-developers/GitPython… external
https://www.vulncheck.com/advisories/gitpython-be… external
https://access.redhat.com/security/cve/CVE-2026-73624 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515243 external
https://www.cve.org/CVERecord?id=CVE-2026-73624 external
https://nvd.nist.gov/vuln/detail/CVE-2026-73624 external
https://github.com/gitpython-developers/GitPython… external
https://www.vulncheck.com/advisories/gitpython-be… external
https://access.redhat.com/security/cve/CVE-2026-73625 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515272 external
https://www.cve.org/CVERecord?id=CVE-2026-73625 external
https://nvd.nist.gov/vuln/detail/CVE-2026-73625 external
https://github.com/gitpython-developers/GitPython… external
https://www.vulncheck.com/advisories/gitpython-be… external
https://access.redhat.com/security/cve/CVE-2026-76218 self
https://bugzilla.redhat.com/show_bug.cgi?id=2519603 external
https://www.cve.org/CVERecord?id=CVE-2026-76218 external
https://nvd.nist.gov/vuln/detail/CVE-2026-76218 external
https://github.com/gitpython-developers/GitPython… external
https://www.vulncheck.com/advisories/gitpython-be… external
https://access.redhat.com/security/cve/CVE-2026-76219 self
https://bugzilla.redhat.com/show_bug.cgi?id=2519597 external
https://www.cve.org/CVERecord?id=CVE-2026-76219 external
https://nvd.nist.gov/vuln/detail/CVE-2026-76219 external
https://github.com/gitpython-developers/GitPython… external
https://www.vulncheck.com/advisories/gitpython-be… external
https://access.redhat.com/security/cve/CVE-2026-76220 self
https://bugzilla.redhat.com/show_bug.cgi?id=2519610 external
https://www.cve.org/CVERecord?id=CVE-2026-76220 external
https://nvd.nist.gov/vuln/detail/CVE-2026-76220 external
https://github.com/gitpython-developers/GitPython… external
https://www.vulncheck.com/advisories/gitpython-be… external
https://access.redhat.com/security/cve/CVE-2026-76221 self
https://bugzilla.redhat.com/show_bug.cgi?id=2519596 external
https://www.cve.org/CVERecord?id=CVE-2026-76221 external
https://nvd.nist.gov/vuln/detail/CVE-2026-76221 external
https://github.com/gitpython-developers/GitPython… external
https://www.vulncheck.com/advisories/gitpython-be… external
https://access.redhat.com/security/cve/CVE-2026-76222 self
https://bugzilla.redhat.com/show_bug.cgi?id=2519609 external
https://www.cve.org/CVERecord?id=CVE-2026-76222 external
https://nvd.nist.gov/vuln/detail/CVE-2026-76222 external
https://github.com/gitpython-developers/GitPython… external
https://www.vulncheck.com/advisories/gitpython-be… external

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "A new release is now available for Red Hat Satellite 6.19 for RHEL 9.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat Satellite is a system management solution that allows organizations\nto configure and maintain their systems without the necessity to provide\npublic Internet access to their servers or other client systems. It\nperforms provisioning and configuration management of predefined standard\noperating environments.\n\nSecurity Fix(es):\n\n* ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution (CVE-2026-11332)\n* ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for CVE-2026-11332) (CVE-2026-16493)\n* openvox-server: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512)\n* puppetserver: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512)\n* rubygem-jwt: ruby-jwt: Authentication bypass due to empty key in HMAC verification (CVE-2026-45363)\n* python-aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses (CVE-2026-69244)\n* python-aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade (CVE-2026-69243)\n* python-aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load() (CVE-2026-34993)\n* openvox-server: jackson-core: Denial of Service via incomplete fix in async JSON parser (CVE-2026-68494)\n* openvox-server: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections (CVE-2026-10051)\n* python-gitpython: GitPython: Arbitrary File Overwrite via improper git option validation (CVE-2026-73624)\n* python-gitpython: GitPython: Remote Code Execution via kwarg value smuggling (CVE-2026-73625)\n* python-gitpython: GitPython: Information disclosure via environment variable expansion in URL handling (CVE-2026-73622)\n* python-gitpython: GitPython: Remote Code Execution via malicious Git template (CVE-2026-73623)\n* python-gitpython: GitPython: Arbitrary file overwrite and read via unsafe git option forwarding (CVE-2026-73620)\n* python-gitpython: GitPython: Arbitrary code execution via improper validation of clone options (CVE-2026-42284)\n* python3.12-gitpython: GitPython: Arbitrary code execution via improper validation of clone options (CVE-2026-42284)\n* python-gitpython: GitPython: Arbitrary command execution due to bypass of dangerous Git option checks (CVE-2026-42215)\n* python3.12-gitpython: GitPython: Arbitrary command execution due to bypass of dangerous Git option checks (CVE-2026-42215)\n* python-gitpython: GitPython: Arbitrary code execution via injected newlines in Git configuration (CVE-2026-44244)\n* python3.12-gitpython: GitPython: Arbitrary code execution via injected newlines in Git configuration (CVE-2026-44244)\n* python-gitpython: GitPython: Arbitrary file creation via path traversal in .gitmodules submodule names (CVE-2026-76222)\n* python3.12-gitpython: GitPython: Arbitrary file creation via path traversal in .gitmodules submodule names (CVE-2026-76222)\n* python-gitpython: GitPython: Remote Code Execution via malicious Git hooks (CVE-2026-76218)\n* python3.12-gitpython: GitPython: Remote Code Execution via malicious Git hooks (CVE-2026-76218)\n* python-gitpython: GitPython: Arbitrary command execution via crafted kwargs (CVE-2026-76220)\n* python3.12-gitpython: GitPython: Arbitrary command execution via crafted kwargs (CVE-2026-76220)\n* python-gitpython: GitPython: Arbitrary File Overwrite via `git read-tree` option injection (CVE-2026-76219)\n* python3.12-gitpython: GitPython: Arbitrary File Overwrite via `git read-tree` option injection (CVE-2026-76219)\n* python-gitpython: GitPython: Arbitrary code execution via config-name injection (CVE-2026-76221)\n* python3.12-gitpython: GitPython: Arbitrary code execution via config-name injection (CVE-2026-76221)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:63385",
        "url": "https://access.redhat.com/errata/RHSA-2026:63385"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "SAT-45592",
        "url": "https://issues.redhat.com/browse/SAT-45592"
      },
      {
        "category": "external",
        "summary": "SAT-46105",
        "url": "https://issues.redhat.com/browse/SAT-46105"
      },
      {
        "category": "external",
        "summary": "SAT-48574",
        "url": "https://issues.redhat.com/browse/SAT-48574"
      },
      {
        "category": "external",
        "summary": "SAT-48584",
        "url": "https://issues.redhat.com/browse/SAT-48584"
      },
      {
        "category": "external",
        "summary": "SAT-48585",
        "url": "https://issues.redhat.com/browse/SAT-48585"
      },
      {
        "category": "external",
        "summary": "SAT-48586",
        "url": "https://issues.redhat.com/browse/SAT-48586"
      },
      {
        "category": "external",
        "summary": "SAT-48587",
        "url": "https://issues.redhat.com/browse/SAT-48587"
      },
      {
        "category": "external",
        "summary": "SAT-48588",
        "url": "https://issues.redhat.com/browse/SAT-48588"
      },
      {
        "category": "external",
        "summary": "SAT-48589",
        "url": "https://issues.redhat.com/browse/SAT-48589"
      },
      {
        "category": "external",
        "summary": "SAT-48628",
        "url": "https://issues.redhat.com/browse/SAT-48628"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_63385.json"
      }
    ],
    "title": "Red Hat Security Advisory: Satellite 6.19.4 Async Update",
    "tracking": {
      "current_release_date": "2026-09-25T13:01:37+00:00",
      "generator": {
        "date": "2026-09-25T13:01:37+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.0"
        }
      },
      "id": "RHSA-2026:63385",
      "initial_release_date": "2026-09-03T23:00:57+00:00",
      "revision_history": [
        {
          "date": "2026-09-03T23:00:57+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-03T23:00:57+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-25T13:01:37+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Satellite 6.19 for RHEL 9",
                "product": {
                  "name": "Red Hat Satellite 6.19 for RHEL 9",
                  "product_id": "9Base-satellite-6.19",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:satellite:6.19::el9"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Satellite 6.19 for RHEL 9",
                "product": {
                  "name": "Red Hat Satellite 6.19 for RHEL 9",
                  "product_id": "9Base-satellite-6.19-capsule",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:satellite_capsule:6.19::el9"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Satellite 6.19 for RHEL 9",
                "product": {
                  "name": "Red Hat Satellite 6.19 for RHEL 9",
                  "product_id": "9Base-satellite-6.19-maintenance",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:satellite_maintenance:6.19::el9"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Satellite 6.19 for RHEL 9",
                "product": {
                  "name": "Red Hat Satellite 6.19 for RHEL 9",
                  "product_id": "9Base-satellite-6.19-utils",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:satellite_utils:6.19::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Satellite 6"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ansible-core-1:2.16.19-1.el9sat.src",
                "product": {
                  "name": "ansible-core-1:2.16.19-1.el9sat.src",
                  "product_id": "ansible-core-1:2.16.19-1.el9sat.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ansible-core@2.16.19-1.el9sat?arch=src\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "foreman-0:3.18.0.10-1.el9sat.src",
                "product": {
                  "name": "foreman-0:3.18.0.10-1.el9sat.src",
                  "product_id": "foreman-0:3.18.0.10-1.el9sat.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/foreman@3.18.0.10-1.el9sat?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "foreman-installer-1:3.18.0.3-1.el9sat.src",
                "product": {
                  "name": "foreman-installer-1:3.18.0.3-1.el9sat.src",
                  "product_id": "foreman-installer-1:3.18.0.3-1.el9sat.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/foreman-installer@3.18.0.3-1.el9sat?arch=src\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openvox-agent-0:8.28.1-1.el9sat.src",
                "product": {
                  "name": "openvox-agent-0:8.28.1-1.el9sat.src",
                  "product_id": "openvox-agent-0:8.28.1-1.el9sat.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openvox-agent@8.28.1-1.el9sat?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openvox-server-0:8.15.2-1.el9sat.src",
                "product": {
                  "name": "openvox-server-0:8.15.2-1.el9sat.src",
                  "product_id": "openvox-server-0:8.15.2-1.el9sat.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openvox-server@8.15.2-1.el9sat?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
                "product": {
                  "name": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
                  "product_id": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pulpcore-obsolete-packages@1.3.1-5.el9pc?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.12-aiohttp-0:3.14.3-1.el9pc.src",
                "product": {
                  "name": "python3.12-aiohttp-0:3.14.3-1.el9pc.src",
                  "product_id": "python3.12-aiohttp-0:3.14.3-1.el9pc.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.12-aiohttp@3.14.3-1.el9pc?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.12-gitpython-0:3.1.59-1.el9pc.src",
                "product": {
                  "name": "python3.12-gitpython-0:3.1.59-1.el9pc.src",
                  "product_id": "python3.12-gitpython-0:3.1.59-1.el9pc.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.12-gitpython@3.1.59-1.el9pc?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.12-pulpcore-0:3.85.28-2.el9pc.src",
                "product": {
                  "name": "python3.12-pulpcore-0:3.85.28-2.el9pc.src",
                  "product_id": "python3.12-pulpcore-0:3.85.28-2.el9pc.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.12-pulpcore@3.85.28-2.el9pc?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
                "product": {
                  "name": "rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
                  "product_id": "rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-foreman_rh_cloud@13.2.11-1.el9sat?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-jwt-0:2.10.3-1.el9sat.src",
                "product": {
                  "name": "rubygem-jwt-0:2.10.3-1.el9sat.src",
                  "product_id": "rubygem-jwt-0:2.10.3-1.el9sat.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-jwt@2.10.3-1.el9sat?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-katello-0:4.20.0.8-1.el9sat.src",
                "product": {
                  "name": "rubygem-katello-0:4.20.0.8-1.el9sat.src",
                  "product_id": "rubygem-katello-0:4.20.0.8-1.el9sat.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-katello@4.20.0.8-1.el9sat?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
                "product": {
                  "name": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
                  "product_id": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-smart_proxy_remote_execution_ssh@1.0.3-2.el9sat?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "satellite-0:6.19.4-1.el9sat.src",
                "product": {
                  "name": "satellite-0:6.19.4-1.el9sat.src",
                  "product_id": "satellite-0:6.19.4-1.el9sat.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/satellite@6.19.4-1.el9sat?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "satellite-lifecycle-0:6.19.0-2.el9sat.src",
                "product": {
                  "name": "satellite-lifecycle-0:6.19.0-2.el9sat.src",
                  "product_id": "satellite-lifecycle-0:6.19.0-2.el9sat.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/satellite-lifecycle@6.19.0-2.el9sat?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ansible-core-1:2.16.19-1.el9sat.noarch",
                "product": {
                  "name": "ansible-core-1:2.16.19-1.el9sat.noarch",
                  "product_id": "ansible-core-1:2.16.19-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ansible-core@2.16.19-1.el9sat?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ansible-test-1:2.16.19-1.el9sat.noarch",
                "product": {
                  "name": "ansible-test-1:2.16.19-1.el9sat.noarch",
                  "product_id": "ansible-test-1:2.16.19-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ansible-test@2.16.19-1.el9sat?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "foreman-debug-0:3.18.0.10-1.el9sat.noarch",
                "product": {
                  "name": "foreman-debug-0:3.18.0.10-1.el9sat.noarch",
                  "product_id": "foreman-debug-0:3.18.0.10-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/foreman-debug@3.18.0.10-1.el9sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
                "product": {
                  "name": "foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
                  "product_id": "foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/foreman-pcp@3.18.0.10-1.el9sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "foreman-cli-0:3.18.0.10-1.el9sat.noarch",
                "product": {
                  "name": "foreman-cli-0:3.18.0.10-1.el9sat.noarch",
                  "product_id": "foreman-cli-0:3.18.0.10-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/foreman-cli@3.18.0.10-1.el9sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "foreman-0:3.18.0.10-1.el9sat.noarch",
                "product": {
                  "name": "foreman-0:3.18.0.10-1.el9sat.noarch",
                  "product_id": "foreman-0:3.18.0.10-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/foreman@3.18.0.10-1.el9sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
                "product": {
                  "name": "foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
                  "product_id": "foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/foreman-dynflow-sidekiq@3.18.0.10-1.el9sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
                "product": {
                  "name": "foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
                  "product_id": "foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/foreman-ec2@3.18.0.10-1.el9sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "foreman-journald-0:3.18.0.10-1.el9sat.noarch",
                "product": {
                  "name": "foreman-journald-0:3.18.0.10-1.el9sat.noarch",
                  "product_id": "foreman-journald-0:3.18.0.10-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/foreman-journald@3.18.0.10-1.el9sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
                "product": {
                  "name": "foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
                  "product_id": "foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/foreman-libvirt@3.18.0.10-1.el9sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
                "product": {
                  "name": "foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
                  "product_id": "foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/foreman-openstack@3.18.0.10-1.el9sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
                "product": {
                  "name": "foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
                  "product_id": "foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/foreman-postgresql@3.18.0.10-1.el9sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "foreman-redis-0:3.18.0.10-1.el9sat.noarch",
                "product": {
                  "name": "foreman-redis-0:3.18.0.10-1.el9sat.noarch",
                  "product_id": "foreman-redis-0:3.18.0.10-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/foreman-redis@3.18.0.10-1.el9sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "foreman-service-0:3.18.0.10-1.el9sat.noarch",
                "product": {
                  "name": "foreman-service-0:3.18.0.10-1.el9sat.noarch",
                  "product_id": "foreman-service-0:3.18.0.10-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/foreman-service@3.18.0.10-1.el9sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
                "product": {
                  "name": "foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
                  "product_id": "foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/foreman-telemetry@3.18.0.10-1.el9sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
                "product": {
                  "name": "foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
                  "product_id": "foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/foreman-vmware@3.18.0.10-1.el9sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "foreman-installer-1:3.18.0.3-1.el9sat.noarch",
                "product": {
                  "name": "foreman-installer-1:3.18.0.3-1.el9sat.noarch",
                  "product_id": "foreman-installer-1:3.18.0.3-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/foreman-installer@3.18.0.3-1.el9sat?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
                "product": {
                  "name": "foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
                  "product_id": "foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/foreman-installer-katello@3.18.0.3-1.el9sat?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openvox-server-0:8.15.2-1.el9sat.noarch",
                "product": {
                  "name": "openvox-server-0:8.15.2-1.el9sat.noarch",
                  "product_id": "openvox-server-0:8.15.2-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openvox-server@8.15.2-1.el9sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
                "product": {
                  "name": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
                  "product_id": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pulpcore-obsolete-packages@1.3.1-5.el9pc?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
                "product": {
                  "name": "python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
                  "product_id": "python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.12-gitpython@3.1.59-1.el9pc?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
                "product": {
                  "name": "python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
                  "product_id": "python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.12-pulpcore@3.85.28-2.el9pc?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
                "product": {
                  "name": "rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
                  "product_id": "rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-foreman_rh_cloud@13.2.11-1.el9sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-jwt-0:2.10.3-1.el9sat.noarch",
                "product": {
                  "name": "rubygem-jwt-0:2.10.3-1.el9sat.noarch",
                  "product_id": "rubygem-jwt-0:2.10.3-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-jwt@2.10.3-1.el9sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
                "product": {
                  "name": "rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
                  "product_id": "rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-katello@4.20.0.8-1.el9sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
                "product": {
                  "name": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
                  "product_id": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-smart_proxy_remote_execution_ssh@1.0.3-2.el9sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "satellite-capsule-0:6.19.4-1.el9sat.noarch",
                "product": {
                  "name": "satellite-capsule-0:6.19.4-1.el9sat.noarch",
                  "product_id": "satellite-capsule-0:6.19.4-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/satellite-capsule@6.19.4-1.el9sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "satellite-common-0:6.19.4-1.el9sat.noarch",
                "product": {
                  "name": "satellite-common-0:6.19.4-1.el9sat.noarch",
                  "product_id": "satellite-common-0:6.19.4-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/satellite-common@6.19.4-1.el9sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
                "product": {
                  "name": "satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
                  "product_id": "satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/satellite-obsolete-packages@6.19.4-1.el9sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "satellite-cli-0:6.19.4-1.el9sat.noarch",
                "product": {
                  "name": "satellite-cli-0:6.19.4-1.el9sat.noarch",
                  "product_id": "satellite-cli-0:6.19.4-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/satellite-cli@6.19.4-1.el9sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "satellite-0:6.19.4-1.el9sat.noarch",
                "product": {
                  "name": "satellite-0:6.19.4-1.el9sat.noarch",
                  "product_id": "satellite-0:6.19.4-1.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/satellite@6.19.4-1.el9sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
                "product": {
                  "name": "satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
                  "product_id": "satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/satellite-lifecycle@6.19.0-2.el9sat?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openvox-agent-0:8.28.1-1.el9sat.x86_64",
                "product": {
                  "name": "openvox-agent-0:8.28.1-1.el9sat.x86_64",
                  "product_id": "openvox-agent-0:8.28.1-1.el9sat.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openvox-agent@8.28.1-1.el9sat?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
                "product": {
                  "name": "python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
                  "product_id": "python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.12-aiohttp@3.14.3-1.el9pc?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
                "product": {
                  "name": "python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
                  "product_id": "python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.12-aiohttp-debugsource@3.14.3-1.el9pc?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
                "product": {
                  "name": "python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
                  "product_id": "python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.12-aiohttp-debuginfo@3.14.3-1.el9pc?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-core-1:2.16.19-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch"
        },
        "product_reference": "ansible-core-1:2.16.19-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-core-1:2.16.19-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src"
        },
        "product_reference": "ansible-core-1:2.16.19-1.el9sat.src",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-test-1:2.16.19-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch"
        },
        "product_reference": "ansible-test-1:2.16.19-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "foreman-0:3.18.0.10-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src"
        },
        "product_reference": "foreman-0:3.18.0.10-1.el9sat.src",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "foreman-debug-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch"
        },
        "product_reference": "foreman-debug-0:3.18.0.10-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "foreman-installer-1:3.18.0.3-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch"
        },
        "product_reference": "foreman-installer-1:3.18.0.3-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "foreman-installer-1:3.18.0.3-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src"
        },
        "product_reference": "foreman-installer-1:3.18.0.3-1.el9sat.src",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch"
        },
        "product_reference": "foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "foreman-pcp-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch"
        },
        "product_reference": "foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openvox-agent-0:8.28.1-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src"
        },
        "product_reference": "openvox-agent-0:8.28.1-1.el9sat.src",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openvox-agent-0:8.28.1-1.el9sat.x86_64 as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64"
        },
        "product_reference": "openvox-agent-0:8.28.1-1.el9sat.x86_64",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openvox-server-0:8.15.2-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch"
        },
        "product_reference": "openvox-server-0:8.15.2-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openvox-server-0:8.15.2-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src"
        },
        "product_reference": "openvox-server-0:8.15.2-1.el9sat.src",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch"
        },
        "product_reference": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src"
        },
        "product_reference": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.12-aiohttp-0:3.14.3-1.el9pc.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src"
        },
        "product_reference": "python3.12-aiohttp-0:3.14.3-1.el9pc.src",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64"
        },
        "product_reference": "python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64"
        },
        "product_reference": "python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64"
        },
        "product_reference": "python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.12-gitpython-0:3.1.59-1.el9pc.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch"
        },
        "product_reference": "python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.12-gitpython-0:3.1.59-1.el9pc.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src"
        },
        "product_reference": "python3.12-gitpython-0:3.1.59-1.el9pc.src",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.12-pulpcore-0:3.85.28-2.el9pc.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch"
        },
        "product_reference": "python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.12-pulpcore-0:3.85.28-2.el9pc.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src"
        },
        "product_reference": "python3.12-pulpcore-0:3.85.28-2.el9pc.src",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-jwt-0:2.10.3-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch"
        },
        "product_reference": "rubygem-jwt-0:2.10.3-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-jwt-0:2.10.3-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src"
        },
        "product_reference": "rubygem-jwt-0:2.10.3-1.el9sat.src",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch"
        },
        "product_reference": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src"
        },
        "product_reference": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "satellite-0:6.19.4-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src"
        },
        "product_reference": "satellite-0:6.19.4-1.el9sat.src",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "satellite-capsule-0:6.19.4-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch"
        },
        "product_reference": "satellite-capsule-0:6.19.4-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "satellite-common-0:6.19.4-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch"
        },
        "product_reference": "satellite-common-0:6.19.4-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
        },
        "product_reference": "satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19-capsule"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-core-1:2.16.19-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch"
        },
        "product_reference": "ansible-core-1:2.16.19-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19-maintenance"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-core-1:2.16.19-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src"
        },
        "product_reference": "ansible-core-1:2.16.19-1.el9sat.src",
        "relates_to_product_reference": "9Base-satellite-6.19-maintenance"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "foreman-0:3.18.0.10-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src"
        },
        "product_reference": "foreman-0:3.18.0.10-1.el9sat.src",
        "relates_to_product_reference": "9Base-satellite-6.19-utils"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "foreman-cli-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch"
        },
        "product_reference": "foreman-cli-0:3.18.0.10-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19-utils"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-jwt-0:2.10.3-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch"
        },
        "product_reference": "rubygem-jwt-0:2.10.3-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19-utils"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-jwt-0:2.10.3-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src"
        },
        "product_reference": "rubygem-jwt-0:2.10.3-1.el9sat.src",
        "relates_to_product_reference": "9Base-satellite-6.19-utils"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "satellite-0:6.19.4-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src"
        },
        "product_reference": "satellite-0:6.19.4-1.el9sat.src",
        "relates_to_product_reference": "9Base-satellite-6.19-utils"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "satellite-cli-0:6.19.4-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch"
        },
        "product_reference": "satellite-cli-0:6.19.4-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19-utils"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-core-1:2.16.19-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch"
        },
        "product_reference": "ansible-core-1:2.16.19-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-core-1:2.16.19-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src"
        },
        "product_reference": "ansible-core-1:2.16.19-1.el9sat.src",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-test-1:2.16.19-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch"
        },
        "product_reference": "ansible-test-1:2.16.19-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "foreman-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch"
        },
        "product_reference": "foreman-0:3.18.0.10-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "foreman-0:3.18.0.10-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src"
        },
        "product_reference": "foreman-0:3.18.0.10-1.el9sat.src",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "foreman-cli-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch"
        },
        "product_reference": "foreman-cli-0:3.18.0.10-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "foreman-debug-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch"
        },
        "product_reference": "foreman-debug-0:3.18.0.10-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch"
        },
        "product_reference": "foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "foreman-ec2-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch"
        },
        "product_reference": "foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "foreman-installer-1:3.18.0.3-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch"
        },
        "product_reference": "foreman-installer-1:3.18.0.3-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "foreman-installer-1:3.18.0.3-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src"
        },
        "product_reference": "foreman-installer-1:3.18.0.3-1.el9sat.src",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch"
        },
        "product_reference": "foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "foreman-journald-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch"
        },
        "product_reference": "foreman-journald-0:3.18.0.10-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "foreman-libvirt-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch"
        },
        "product_reference": "foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "foreman-openstack-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch"
        },
        "product_reference": "foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "foreman-pcp-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch"
        },
        "product_reference": "foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "foreman-postgresql-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch"
        },
        "product_reference": "foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "foreman-redis-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch"
        },
        "product_reference": "foreman-redis-0:3.18.0.10-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "foreman-service-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch"
        },
        "product_reference": "foreman-service-0:3.18.0.10-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "foreman-telemetry-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch"
        },
        "product_reference": "foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "foreman-vmware-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch"
        },
        "product_reference": "foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openvox-agent-0:8.28.1-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src"
        },
        "product_reference": "openvox-agent-0:8.28.1-1.el9sat.src",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openvox-agent-0:8.28.1-1.el9sat.x86_64 as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64"
        },
        "product_reference": "openvox-agent-0:8.28.1-1.el9sat.x86_64",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openvox-server-0:8.15.2-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch"
        },
        "product_reference": "openvox-server-0:8.15.2-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openvox-server-0:8.15.2-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src"
        },
        "product_reference": "openvox-server-0:8.15.2-1.el9sat.src",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch"
        },
        "product_reference": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src"
        },
        "product_reference": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.12-aiohttp-0:3.14.3-1.el9pc.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src"
        },
        "product_reference": "python3.12-aiohttp-0:3.14.3-1.el9pc.src",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64"
        },
        "product_reference": "python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64"
        },
        "product_reference": "python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64"
        },
        "product_reference": "python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.12-gitpython-0:3.1.59-1.el9pc.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch"
        },
        "product_reference": "python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.12-gitpython-0:3.1.59-1.el9pc.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
        },
        "product_reference": "python3.12-gitpython-0:3.1.59-1.el9pc.src",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.12-pulpcore-0:3.85.28-2.el9pc.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch"
        },
        "product_reference": "python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.12-pulpcore-0:3.85.28-2.el9pc.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src"
        },
        "product_reference": "python3.12-pulpcore-0:3.85.28-2.el9pc.src",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch"
        },
        "product_reference": "rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src"
        },
        "product_reference": "rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-jwt-0:2.10.3-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch"
        },
        "product_reference": "rubygem-jwt-0:2.10.3-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-jwt-0:2.10.3-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src"
        },
        "product_reference": "rubygem-jwt-0:2.10.3-1.el9sat.src",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-katello-0:4.20.0.8-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch"
        },
        "product_reference": "rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-katello-0:4.20.0.8-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src"
        },
        "product_reference": "rubygem-katello-0:4.20.0.8-1.el9sat.src",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch"
        },
        "product_reference": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src"
        },
        "product_reference": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "satellite-0:6.19.4-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch"
        },
        "product_reference": "satellite-0:6.19.4-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "satellite-0:6.19.4-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src"
        },
        "product_reference": "satellite-0:6.19.4-1.el9sat.src",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "satellite-cli-0:6.19.4-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch"
        },
        "product_reference": "satellite-cli-0:6.19.4-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "satellite-common-0:6.19.4-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch"
        },
        "product_reference": "satellite-common-0:6.19.4-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "satellite-lifecycle-0:6.19.0-2.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch"
        },
        "product_reference": "satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "satellite-lifecycle-0:6.19.0-2.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src"
        },
        "product_reference": "satellite-lifecycle-0:6.19.0-2.el9sat.src",
        "relates_to_product_reference": "9Base-satellite-6.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
          "product_id": "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
        },
        "product_reference": "satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
        "relates_to_product_reference": "9Base-satellite-6.19"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-10051",
      "cwe": {
        "id": "CWE-201",
        "name": "Insertion of Sensitive Information Into Sent Data"
      },
      "discovery_date": "2026-07-14T10:01:09.470495+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2499928"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Eclipse Jetty. This vulnerability allows a remote attacker to cause the server to retain HTTP/1.1 request trailers from a prior connection. Consequently, subsequent requests made over the same connection may unintentionally disclose information by reporting the previously retained trailers, or a combination of previous and current request trailers.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Moderate: This information disclosure flaw in Eclipse Jetty allows HTTP/1.1 trailers from a previous request to be retained and subsequently exposed to other requests sharing the same connection. This could lead to unintended disclosure of sensitive information in Red Hat products utilizing Jetty, such as Red Hat AMQ and Enterprise Application Platform, particularly when connection reuse is active and trailers contain confidential data. The confidentiality impact is considered low.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src"
        ],
        "known_not_affected": [
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
          "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-10051"
        },
        {
          "category": "external",
          "summary": "RHBZ#2499928",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499928"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-10051",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-10051"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10051",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10051"
        },
        {
          "category": "external",
          "summary": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/119",
          "url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/119"
        }
      ],
      "release_date": "2026-07-14T08:44:38.233000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T23:00:57+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
          "product_ids": [
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63385"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Tommaso Bona"
          ]
        }
      ],
      "cve": "CVE-2026-11332",
      "cwe": {
        "id": "CWE-88",
        "name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
      },
      "discovery_date": "2026-04-14T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2485379"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role\u0027s meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field. This allows arbitrary code execution on the machine of a user who installs the role via ansible-galaxy role install.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Conditions for Exploitation: Successful exploitation requires user interaction, specifically tricking a victim into installing a maliciously crafted Ansible role (or a role with a malicious dependency) using the ansible-galaxy role install command.\n\nBroad Impact: While user interaction is required, the potential impact is highly severe. Successfully injecting the malicious arguments allows a remote attacker to achieve arbitrary code execution on the machine running the Ansible command, leading to a full compromise of the user\u0027s environment and system integrity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch"
        ],
        "known_not_affected": [
          "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
          "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-11332"
        },
        {
          "category": "external",
          "summary": "RHBZ#2485379",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485379"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-11332",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-11332"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11332",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11332"
        },
        {
          "category": "external",
          "summary": "https://github.com/ansible/ansible",
          "url": "https://github.com/ansible/ansible"
        }
      ],
      "release_date": "2026-06-05T07:12:55.739000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T23:00:57+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63385"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Ta Duc Thien"
          ],
          "organization": "NTCS"
        }
      ],
      "cve": "CVE-2026-16493",
      "cwe": {
        "id": "CWE-88",
        "name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
      },
      "discovery_date": "2026-07-21T11:19:29.854000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2503724"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in ansible-core. The _extract_collection_from_git() function in ansible-core\u0027s concrete_artifact_manager.py constructs git clone commands without a \u0027--\u0027 (end-of-options) separator before user-supplied URLs when installing collections from git sources. An attacker who provides a crafted collection source URI containing git argument injection payloads can achieve arbitrary command execution when a user runs \u0027ansible-galaxy collection install\u0027 with the malicious source. This is an incomplete fix for CVE-2026-11332, which hardened the role install path but missed the equivalent collection install code path.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for CVE-2026-11332)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat has assessed this vulnerability as Important because it allows arbitrary command execution when a user installs a collection from a crafted git source. The vulnerability exists because the fix for CVE-2026-11332 (RHSA-2026:42078, RHSA-2026:42079, RHSA-2026:42080, published 2026-07-20) only addressed the role install path in lib/ansible/utils/galaxy.py but did not apply the same \u0027--\u0027 end-of-options separator to the collection install path in lib/ansible/galaxy/collection/concrete_artifact_manager.py. All versions of ansible-core that support collection installation from git sources are affected. Users who install collections exclusively from Ansible Galaxy or Automation Hub (HTTPS sources) are not exposed to this specific flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch"
        ],
        "known_not_affected": [
          "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
          "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-16493"
        },
        {
          "category": "external",
          "summary": "RHBZ#2503724",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503724"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-16493",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-16493"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-16493",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16493"
        }
      ],
      "release_date": "2026-07-21T16:32:48.105000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T23:00:57+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63385"
        },
        {
          "category": "workaround",
          "details": "The following practices would help for avoiding exposure and mitigate this flaw:\n\n1. Do not install Ansible collections from untrusted or unverified git sources. Only install collections from trusted sources such as Ansible Galaxy (https://galaxy.ansible.com), Red Hat Automation Hub (https://console.redhat.com/ansible/automation-hub), or verified internal repositories using HTTPS URLs.\n\n2. Carefully inspect any requirements.yml files before running \u0027ansible-galaxy collection install -r requirements.yml\u0027. Verify that all collection sources use legitimate HTTPS URLs and do not contain git+ prefixed URIs with suspicious characters (especially values starting with \u0027-\u0027).\n\n3. Ensure your system\u0027s git version is 2.12 or later, which disables the ext:: transport by default. While this does not fully prevent exploitation (the -ccore.sshCommand technique bypasses transport restrictions), it eliminates one of the exploitation vectors.\n\n4. Restrict the GIT_ALLOW_PROTOCOL environment variable to only necessary protocols (e.g. https, ssh) and never include \u0027ext\u0027 unless absolutely required.",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for CVE-2026-11332)"
    },
    {
      "cve": "CVE-2026-34993",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2026-06-02T20:01:12.690409+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484099"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the `CookieJar.load()` function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicious code on the affected system. This issue is most likely to occur in applications that allow attacker-controlled files to be loaded.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw in AIOHTTP, a Python asynchronous HTTP framework, due to potential arbitrary code execution. The vulnerability arises when applications load untrusted input into the `CookieJar.load()` function. Exploitation requires an application to be configured to process attacker-controlled files, which is not a default or common scenario in most Red Hat product deployments.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64"
        ],
        "known_not_affected": [
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
          "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34993"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484099",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484099"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34993",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34993"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34993",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34993"
        },
        {
          "category": "external",
          "summary": "https://github.com/aio-libs/aiohttp/commit/dcf40f30637e8752c76781cf6703b5a236749a00",
          "url": "https://github.com/aio-libs/aiohttp/commit/dcf40f30637e8752c76781cf6703b5a236749a00"
        },
        {
          "category": "external",
          "summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jg22-mg44-37j8",
          "url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jg22-mg44-37j8"
        }
      ],
      "release_date": "2026-06-02T18:29:15.847000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T23:00:57+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
          "product_ids": [
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63385"
        },
        {
          "category": "workaround",
          "details": "Applications using AIOHTTP that are configured to load untrusted files via the `CookieJar.load()` function should implement input sanitization prior to loading. This prevents the injection of malicious code.",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()"
    },
    {
      "cve": "CVE-2026-42215",
      "cwe": {
        "id": "CWE-88",
        "name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
      },
      "discovery_date": "2026-05-07T19:01:30.789237+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467802"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GitPython, a Python library used to interact with Git repositories. This vulnerability allows an attacker to achieve arbitrary command execution by providing specially crafted arguments (kwargs) to functions such as Repo.clone_from(), Remote.fetch(), Remote.pull(), or Remote.push(). This bypasses existing security checks designed to block dangerous Git options, enabling the execution of unauthorized commands.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "GitPython: GitPython: Arbitrary command execution due to bypass of dangerous Git option checks",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important arbitrary command execution flaw in GitPython, a library utilized across several Red Hat products. The vulnerability arises from an incomplete security check that allows specially crafted Python keyword arguments, such as `upload_pack` or `receive_pack`, to bypass intended safeguards against dangerous Git options. This bypass enables an attacker to execute arbitrary commands on systems where applications process untrusted input through GitPython\u0027s repository interaction functions, potentially leading to system compromise, credential theft, or unauthorized data modification.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
        ],
        "known_not_affected": [
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
          "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42215"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467802",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467802"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42215",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42215"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42215",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42215"
        },
        {
          "category": "external",
          "summary": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.47",
          "url": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.47"
        },
        {
          "category": "external",
          "summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rpm5-65cw-6hj4",
          "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rpm5-65cw-6hj4"
        }
      ],
      "release_date": "2026-05-07T18:17:03.194000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T23:00:57+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
          "product_ids": [
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63385"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "GitPython: GitPython: Arbitrary command execution due to bypass of dangerous Git option checks"
    },
    {
      "cve": "CVE-2026-42284",
      "cwe": {
        "id": "CWE-88",
        "name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
      },
      "discovery_date": "2026-05-07T19:01:23.592356+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467800"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GitPython, a Python library for interacting with Git repositories. A remote attacker could exploit an input validation vulnerability in the `_clone()` function. By crafting a malicious string in the `multi_options` parameter, an attacker could bypass validation. This allows for the injection of arbitrary Git configurations, such as `core.hooksPath`, leading to the execution of attacker-controlled hooks and ultimately, arbitrary code execution during a clone operation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "GitPython: GitPython: Arbitrary code execution via improper validation of clone options",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in GitPython allows for arbitrary code execution during Git clone operations within Red Hat products that utilize the library. The flaw stems from insufficient validation of user-supplied input to the `_clone()` function, enabling an attacker to inject malicious Git configurations, such as `core.hooksPath`, and execute arbitrary code. Exploitation requires an application to process untrusted input through GitPython\u0027s cloning functionalities.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
        ],
        "known_not_affected": [
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
          "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42284"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467800",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467800"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42284",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42284"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42284",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42284"
        },
        {
          "category": "external",
          "summary": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.47",
          "url": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.47"
        },
        {
          "category": "external",
          "summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-x2qx-6953-8485",
          "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-x2qx-6953-8485"
        }
      ],
      "release_date": "2026-05-07T18:19:20.129000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T23:00:57+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
          "product_ids": [
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63385"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "GitPython: GitPython: Arbitrary code execution via improper validation of clone options"
    },
    {
      "cve": "CVE-2026-44244",
      "cwe": {
        "id": "CWE-1286",
        "name": "Improper Validation of Syntactic Correctness of Input"
      },
      "discovery_date": "2026-05-07T19:01:36.732863+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467804"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GitPython, a Python library used to interact with Git repositories. The `GitConfigParser.set_value()` function does not properly validate input for newlines. This vulnerability allows an attacker to inject malicious configuration settings, specifically the `core.hooksPath`, into a Git repository. Consequently, any Git operation that triggers hooks, such as committing or merging, could lead to arbitrary code execution from an attacker-controlled path.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "GitPython: GitPython: Arbitrary code execution via injected newlines in Git configuration",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw in GitPython that allows for arbitrary code execution. By injecting newlines into Git configuration values, an attacker can manipulate the `core.hooksPath` to execute malicious scripts during standard Git operations. This poses a significant risk in environments where applications process unvalidated user input when interacting with Git repositories, potentially leading to persistent repository configuration poisoning.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
        ],
        "known_not_affected": [
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
          "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44244"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467804",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467804"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44244",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44244"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44244",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44244"
        },
        {
          "category": "external",
          "summary": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.49",
          "url": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.49"
        },
        {
          "category": "external",
          "summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-v87r-6q3f-2j67",
          "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-v87r-6q3f-2j67"
        }
      ],
      "release_date": "2026-05-07T18:22:39.704000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T23:00:57+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
          "product_ids": [
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63385"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, applications that use GitPython and process untrusted input for Git configuration values must implement robust input validation and sanitization. This prevents the injection of newlines that could manipulate `core.hooksPath` and lead to arbitrary code execution. Additionally, ensure that applications interacting with Git repositories operate with the principle of least privilege to limit the potential impact of any successful exploitation.",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "GitPython: GitPython: Arbitrary code execution via injected newlines in Git configuration"
    },
    {
      "cve": "CVE-2026-45363",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-07-14T22:03:23.419937+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500739"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in ruby-jwt, a Ruby implementation of the RFC 7519 OAuth JSON Web Token (JWT) standard. A remote attacker can exploit this vulnerability by crafting a malicious token that is accepted due to an empty key being used in the HMAC (Hash-based Message Authentication Code) digest calculation during token verification. This allows the attacker to bypass authentication and integrity checks, potentially leading to unauthorized access or data manipulation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ruby-jwt: ruby-jwt: Authentication bypass due to empty key in HMAC verification",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src"
        ],
        "known_not_affected": [
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
          "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-45363"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500739",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500739"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-45363",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-45363"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45363",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45363"
        },
        {
          "category": "external",
          "summary": "https://github.com/jwt/ruby-jwt/commit/9820020869ad147b941e49d96ab8beba35532964",
          "url": "https://github.com/jwt/ruby-jwt/commit/9820020869ad147b941e49d96ab8beba35532964"
        },
        {
          "category": "external",
          "summary": "https://github.com/jwt/ruby-jwt/commit/db560b769a07bd9724e77ff505011ac01872106f",
          "url": "https://github.com/jwt/ruby-jwt/commit/db560b769a07bd9724e77ff505011ac01872106f"
        },
        {
          "category": "external",
          "summary": "https://github.com/jwt/ruby-jwt/releases/tag/v2.10.3",
          "url": "https://github.com/jwt/ruby-jwt/releases/tag/v2.10.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/jwt/ruby-jwt/releases/tag/v3.2.0",
          "url": "https://github.com/jwt/ruby-jwt/releases/tag/v3.2.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/jwt/ruby-jwt/security/advisories/GHSA-c32j-vqhx-rx3x",
          "url": "https://github.com/jwt/ruby-jwt/security/advisories/GHSA-c32j-vqhx-rx3x"
        }
      ],
      "release_date": "2026-07-14T21:32:26.676000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T23:00:57+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
          "product_ids": [
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63385"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "ruby-jwt: ruby-jwt: Authentication bypass due to empty key in HMAC verification"
    },
    {
      "cve": "CVE-2026-54512",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2026-06-23T22:01:49.821346+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2492015"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator (PTV) when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic type parameter of an allowed container. This leads to the loading and instantiation of arbitrary classes, potentially resulting in arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in `jackson-databind` is rated as Important. While it describes a potential bypass of the PolymorphicTypeValidator leading to arbitrary code execution, exploitation requires an attacker to already possess administrative privileges, specifically the `manage-realm` role. This flaw does not enable privilege escalation, as it does not grant additional capabilities beyond those inherently available to an existing administrator.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src"
        ],
        "known_not_affected": [
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
          "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-54512"
        },
        {
          "category": "external",
          "summary": "RHBZ#2492015",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492015"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-54512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-54512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54512"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5",
          "url": "https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-databind/issues/5988",
          "url": "https://github.com/FasterXML/jackson-databind/issues/5988"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm",
          "url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm"
        }
      ],
      "release_date": "2026-06-23T20:56:36.646000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T23:00:57+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
          "product_ids": [
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63385"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass"
    },
    {
      "cve": "CVE-2026-68494",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-04T15:01:53.631865+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2511026"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This uncontrolled memory growth can lead to a denial of service (DoS) by exhausting the Java Virtual Machine (JVM) heap.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in `jackson-core`\u0027s asynchronous JSON parser. A remote, unauthenticated attacker can exploit an incomplete fix to bypass number length constraints, leading to unbounded memory accumulation and potential JVM heap exhaustion in reactive frameworks processing chunked JSON input.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src"
        ],
        "known_not_affected": [
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
          "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-68494"
        },
        {
          "category": "external",
          "summary": "RHBZ#2511026",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511026"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-68494",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-68494"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-68494",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68494"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd",
          "url": "https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641",
          "url": "https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8",
          "url": "https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-core/pull/1611",
          "url": "https://github.com/FasterXML/jackson-core/pull/1611"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9",
          "url": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9"
        },
        {
          "category": "external",
          "summary": "https://github.com/advisories/GHSA-72hv-8253-57qq",
          "url": "https://github.com/advisories/GHSA-72hv-8253-57qq"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18401",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18401"
        }
      ],
      "release_date": "2026-08-04T14:39:14.471000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T23:00:57+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
          "product_ids": [
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63385"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser"
    },
    {
      "cve": "CVE-2026-69243",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2026-08-03T22:02:56.444781+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510831"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability allows a remote attacker to perform HTTP request smuggling due to an edge case in the WebSocket upgrade procedure. When a WebSocket upgrade request includes a body, the parser may switch protocols before the entire body is received. This leaves trailing data to be processed incorrectly, potentially enabling an attacker to bypass security mechanisms or gain unauthorized access to resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Moderate impact. This vulnerability in aiohttp\u0027s HTTP parser enables request smuggling when the server-side component handles WebSocket upgrade requests containing a body. An attacker could exploit an edge case during protocol switching, causing trailing data to be processed as subsequent requests or upgraded protocol data. This affects Red Hat products utilizing aiohttp in a server-side capacity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64"
        ],
        "known_not_affected": [
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
          "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-69243"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510831",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510831"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-69243",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-69243"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69243",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69243"
        },
        {
          "category": "external",
          "summary": "https://github.com/aio-libs/aiohttp/commit/6ae358f0983c3f4d6f67692b2f8e65dc8e091c98",
          "url": "https://github.com/aio-libs/aiohttp/commit/6ae358f0983c3f4d6f67692b2f8e65dc8e091c98"
        },
        {
          "category": "external",
          "summary": "https://github.com/aio-libs/aiohttp/pull/13017",
          "url": "https://github.com/aio-libs/aiohttp/pull/13017"
        },
        {
          "category": "external",
          "summary": "https://github.com/aio-libs/aiohttp/releases/tag/v3.14.2",
          "url": "https://github.com/aio-libs/aiohttp/releases/tag/v3.14.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-mfx4-hv73-q22v",
          "url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-mfx4-hv73-q22v"
        }
      ],
      "release_date": "2026-08-03T20:45:43.406000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T23:00:57+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
          "product_ids": [
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63385"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade"
    },
    {
      "cve": "CVE-2026-69244",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-08-03T22:02:32.583060+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510825"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability involves an out-of-bounds heap read in the C response parser when processing malformed HTTP responses. An attacker operating a malicious server, or even an accidental malformed response, could exploit this to trigger a Denial of Service (DoS) in the client application, making it unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important severity flaw in aiohttp that could lead to a denial of service in client applications. A remote, malicious HTTP server could send a specially crafted response, causing an out-of-bounds read in the aiohttp C response parser and resulting in the client application terminating unexpectedly.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64"
        ],
        "known_not_affected": [
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
          "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-69244"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510825",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510825"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-69244",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-69244"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69244",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69244"
        },
        {
          "category": "external",
          "summary": "https://github.com/aio-libs/aiohttp/commit/49f65d54150397892f7bcc4aae887767d51c322d",
          "url": "https://github.com/aio-libs/aiohttp/commit/49f65d54150397892f7bcc4aae887767d51c322d"
        },
        {
          "category": "external",
          "summary": "https://github.com/aio-libs/aiohttp/pull/13223",
          "url": "https://github.com/aio-libs/aiohttp/pull/13223"
        },
        {
          "category": "external",
          "summary": "https://github.com/aio-libs/aiohttp/releases/tag/v3.14.3",
          "url": "https://github.com/aio-libs/aiohttp/releases/tag/v3.14.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-cq5v-8q36-5273",
          "url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-cq5v-8q36-5273"
        }
      ],
      "release_date": "2026-08-03T20:50:59.538000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T23:00:57+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
          "product_ids": [
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63385"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses"
    },
    {
      "cve": "CVE-2026-73620",
      "cwe": {
        "id": "CWE-88",
        "name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
      },
      "discovery_date": "2026-08-13T11:53:07.982354+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515261"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GitPython. This vulnerability arises from insufficient guarding of git option forwarding within the `IndexFile.checkout()` and `TagReference.create()` functions. An authenticated attacker can exploit this by passing unsafe options through keyword arguments, leading to the ability to overwrite arbitrary files with repository content or read sensitive files. This could result in significant data integrity and confidentiality impacts.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gitpython: GitPython: Arbitrary file overwrite and read via unsafe git option forwarding",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw in GitPython that allows an authenticated attacker to achieve arbitrary file overwrite and read capabilities. The vulnerability stems from insufficient validation of git options passed to `IndexFile.checkout()` and `TagReference.create()`, enabling attackers to manipulate repository content or access sensitive files. This impacts several Red Hat products, including Red Hat OpenStack Platform, Red Hat Satellite, and Red Hat Ansible Automation Platform.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64"
        ],
        "known_not_affected": [
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
          "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73620"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515261",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515261"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73620",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73620"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73620",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73620"
        },
        {
          "category": "external",
          "summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3f7w-8rr8-f37f",
          "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3f7w-8rr8-f37f"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/gitpython-before-arbitrary-file-overwrite-and-read",
          "url": "https://www.vulncheck.com/advisories/gitpython-before-arbitrary-file-overwrite-and-read"
        }
      ],
      "release_date": "2026-08-13T11:28:21.426000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T23:00:57+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
          "product_ids": [
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63385"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gitpython: GitPython: Arbitrary file overwrite and read via unsafe git option forwarding"
    },
    {
      "cve": "CVE-2026-73622",
      "cwe": {
        "id": "CWE-914",
        "name": "Improper Control of Dynamically-Identified Variables"
      },
      "discovery_date": "2026-08-13T11:54:21.696489+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515269"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GitPython. This vulnerability allows a remote attacker to exfiltrate sensitive information, such as environment variables, by crafting malicious URLs. When these URLs are processed during Git operations like fetch or pull, the environment variables are expanded and transmitted to attacker-controlled hosts, leading to information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gitpython: GitPython: Information disclosure via environment variable expansion in URL handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important information disclosure flaw in GitPython. It allows an attacker to exfiltrate sensitive environment variables from systems that use GitPython to create or add remote repositories from untrusted URLs. This occurs because environment variable expansion is not disabled in URL handling, leading to secrets being embedded in Git configuration and transmitted to attacker-controlled hosts.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
        ],
        "known_not_affected": [
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
          "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73622"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515269",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515269"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73622",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73622"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73622",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73622"
        },
        {
          "category": "external",
          "summary": "https://github.com/gitpython-developers/GitPython/commit/8ac5a30519b6f4af85398b9b9d7064ff4d452da2",
          "url": "https://github.com/gitpython-developers/GitPython/commit/8ac5a30519b6f4af85398b9b9d7064ff4d452da2"
        },
        {
          "category": "external",
          "summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-94p4-4cq8-9g67",
          "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-94p4-4cq8-9g67"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/gitpython-before-environment-variable-exfiltration-via-remote-add",
          "url": "https://www.vulncheck.com/advisories/gitpython-before-environment-variable-exfiltration-via-remote-add"
        }
      ],
      "release_date": "2026-08-13T11:28:22.807000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T23:00:57+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
          "product_ids": [
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63385"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gitpython: GitPython: Information disclosure via environment variable expansion in URL handling"
    },
    {
      "cve": "CVE-2026-73623",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-08-13T11:55:15.280313+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515275"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GitPython. An incomplete denylist in the `unsafe_git_clone_options` function fails to restrict the `--template` option. This allows a remote attacker to supply a malicious Git template directory, leading to arbitrary command execution during clone operations.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gitpython: GitPython: Remote Code Execution via malicious Git template",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important severity flaw in GitPython where an incomplete denylist in `unsafe_git_clone_options` allows remote code execution. An attacker can leverage the `--template` option to execute arbitrary commands during repository cloning by pointing to a directory containing malicious post-checkout hooks. This risk is present when applications using GitPython clone untrusted repositories.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
        ],
        "known_not_affected": [
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
          "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73623"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515275",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515275"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73623",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73623"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73623",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73623"
        },
        {
          "category": "external",
          "summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-6p8h-3wgx-97gf",
          "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-6p8h-3wgx-97gf"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/gitpython-before-remote-code-execution-via-template",
          "url": "https://www.vulncheck.com/advisories/gitpython-before-remote-code-execution-via-template"
        }
      ],
      "release_date": "2026-08-13T11:28:23.477000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T23:00:57+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
          "product_ids": [
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63385"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gitpython: GitPython: Remote Code Execution via malicious Git template"
    },
    {
      "cve": "CVE-2026-73624",
      "cwe": {
        "id": "CWE-88",
        "name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
      },
      "discovery_date": "2026-08-13T11:51:01.223720+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515243"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GitPython. This vulnerability allows a remote attacker to overwrite arbitrary files on the system. By failing to properly validate git options passed to the `Diffable.diff` method, an attacker can supply a malicious output argument to write patch content to attacker-controlled file paths, leading to potential system compromise.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gitpython: GitPython: Arbitrary File Overwrite via improper git option validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important arbitrary file overwrite vulnerability in GitPython\u0027s Diffable.diff method. It allows an attacker to write arbitrary content to chosen file paths at the process\u0027s privilege level by manipulating git options, which could lead to system compromise or privilege escalation.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
        ],
        "known_not_affected": [
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
          "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73624"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515243",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515243"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73624",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73624"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73624",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73624"
        },
        {
          "category": "external",
          "summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-fjr4-x663-mwxc",
          "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-fjr4-x663-mwxc"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/gitpython-before-arbitrary-file-overwrite-via-diff",
          "url": "https://www.vulncheck.com/advisories/gitpython-before-arbitrary-file-overwrite-via-diff"
        }
      ],
      "release_date": "2026-08-13T11:28:24.155000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T23:00:57+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
          "product_ids": [
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63385"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gitpython: GitPython: Arbitrary File Overwrite via improper git option validation"
    },
    {
      "cve": "CVE-2026-73625",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-08-13T11:54:49.542600+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515272"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GitPython. Attackers can bypass the `check_unsafe_options` guard by smuggling git options within single-character keyword argument (kwarg) values. This allows them to supply specially crafted option dictionaries to various GitPython methods, such as `clone_from` or `fetch`, leading to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gitpython: GitPython: Remote Code Execution via kwarg value smuggling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important remote code execution vulnerability in GitPython, affecting Red Hat products that utilize GitPython versions prior to 3.1.54. The flaw allows an attacker to bypass input sanitization by smuggling malicious Git options within single-character keyword arguments, leading to arbitrary command execution when GitPython methods process untrusted input. This poses a significant risk to the integrity and confidentiality of systems.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
        ],
        "known_not_affected": [
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
          "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73625"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515272",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515272"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73625",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73625"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73625",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73625"
        },
        {
          "category": "external",
          "summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-r9mr-m37c-5fr3",
          "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-r9mr-m37c-5fr3"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/gitpython-before-remote-code-execution-via-kwarg-value-smuggling",
          "url": "https://www.vulncheck.com/advisories/gitpython-before-remote-code-execution-via-kwarg-value-smuggling"
        }
      ],
      "release_date": "2026-08-13T11:28:24.833000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T23:00:57+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
          "product_ids": [
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63385"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gitpython: GitPython: Remote Code Execution via kwarg value smuggling"
    },
    {
      "cve": "CVE-2026-76218",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "discovery_date": "2026-08-19T14:12:37.531853+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2519603"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GitPython. This vulnerability allows a remote attacker to achieve arbitrary code execution. By supplying a specially crafted template parameter to the `Repo.init` function, an attacker can point to a directory containing malicious Git hooks. When Git operations are performed on the initialized repository, these hooks execute arbitrary code, leading to a complete compromise of the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gitpython: GitPython: Remote Code Execution via malicious Git hooks",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "GitPython\u0027s Repo.init forwards an unvalidated template parameter, letting an attacker who controls that parameter point at a directory of malicious git hooks that execute on subsequent git operations (RCE), fixed in 3.1.58. Red Hat products that bundle GitPython use it as an internal build/automation-time dependency and do not expose the Repo.init template/options parameters to adversary-controlled input; the vulnerable parameter cannot be controlled by an attacker in these products, so they are marked not affected. GitPython as shipped in Red Hat OpenStack Platform 16.2 and 17.1 contains the vulnerable library code and retains its affected determination.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
        ],
        "known_not_affected": [
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
          "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-76218"
        },
        {
          "category": "external",
          "summary": "RHBZ#2519603",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519603"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-76218",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-76218"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-76218",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76218"
        },
        {
          "category": "external",
          "summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-9rj7-rf2p-w77r",
          "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-9rj7-rf2p-w77r"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/gitpython-before-remote-code-execution-via-repo-init",
          "url": "https://www.vulncheck.com/advisories/gitpython-before-remote-code-execution-via-repo-init"
        }
      ],
      "release_date": "2026-08-19T14:02:02.729000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T23:00:57+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
          "product_ids": [
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63385"
        },
        {
          "category": "workaround",
          "details": "Do not pass untrusted or attacker-influenced input as the template parameter (or other forwarded options) to GitPython\u0027s Repo.init. Upgrade to GitPython 3.1.58 or later, where the unsafe option forwarding is fixed.",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gitpython: GitPython: Remote Code Execution via malicious Git hooks"
    },
    {
      "cve": "CVE-2026-76219",
      "cwe": {
        "id": "CWE-88",
        "name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
      },
      "discovery_date": "2026-08-19T14:12:07.494177+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2519597"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GitPython. This vulnerability allows an attacker to overwrite arbitrary files on the system. By injecting specific options into the `git read-tree` command through methods like `IndexFile.from_tree`, `IndexFile.reset`, and `IndexFile.merge_tree`, without proper option validation or argument separation, an attacker can cause the application to write a git-index blob to any attacker-controlled writable path, leading to data destruction.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gitpython: GitPython: Arbitrary File Overwrite via `git read-tree` option injection",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "GitPython\u0027s IndexFile.from_tree, IndexFile.reset, and IndexFile.merge_tree append caller-influenced treeish strings to `git read-tree` without option validation or argument separation, letting an attacker who controls those arguments inject the `--index-output` option to overwrite arbitrary files at attacker-controlled writable paths (data destruction), fixed in 3.1.58. Red Hat products that bundle GitPython use it as an internal build/automation-time dependency and do not expose these IndexFile treeish arguments to adversary-controlled input; the vulnerable input cannot be controlled by an attacker in these products, so they are marked not affected. GitPython as shipped in Red Hat OpenStack Platform 16.2 and 17.1 contains the vulnerable library code and retains its affected determination.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
        ],
        "known_not_affected": [
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
          "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-76219"
        },
        {
          "category": "external",
          "summary": "RHBZ#2519597",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519597"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-76219",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-76219"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-76219",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76219"
        },
        {
          "category": "external",
          "summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-4gmw-gg2m-w46p",
          "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-4gmw-gg2m-w46p"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/gitpython-before-arbitrary-file-overwrite-via-read-tree",
          "url": "https://www.vulncheck.com/advisories/gitpython-before-arbitrary-file-overwrite-via-read-tree"
        }
      ],
      "release_date": "2026-08-19T14:02:03.425000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T23:00:57+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
          "product_ids": [
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63385"
        },
        {
          "category": "workaround",
          "details": "Do not pass untrusted or attacker-influenced treeish arguments to GitPython\u0027s IndexFile.from_tree, IndexFile.reset, or IndexFile.merge_tree. Upgrade to GitPython 3.1.58 or later, where option injection into `git read-tree` is fixed.",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gitpython: GitPython: Arbitrary File Overwrite via `git read-tree` option injection"
    },
    {
      "cve": "CVE-2026-76220",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-08-19T14:13:21.277967+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2519610"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GitPython. A remote attacker can bypass the `check_unsafe_options` guard by combining a single-character keyword argument with `split_single_char_options=False`. This allows the attacker to supply a crafted dictionary of keyword arguments to guarded methods, such as `clone_from`, leading to arbitrary operating system command execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gitpython: GitPython: Arbitrary command execution via crafted kwargs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "GitPython\u0027s check_unsafe_options guard can be bypassed by combining a single-character keyword argument with split_single_char_options=False, letting an attacker who supplies a crafted kwargs dictionary to guarded methods such as clone_from emit a joined token parsed as `--upload-pack` and achieve arbitrary OS command execution even at the default allow_unsafe_options=False, fixed in 3.1.58. Red Hat products that bundle GitPython use it as an internal build/automation-time dependency and do not expose these method keyword arguments to adversary-controlled input; the vulnerable input cannot be controlled by an attacker in these products, so they are marked not affected. GitPython as shipped in Red Hat OpenStack Platform 16.2 and 17.1 contains the vulnerable library code and retains its affected determination.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
        ],
        "known_not_affected": [
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
          "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-76220"
        },
        {
          "category": "external",
          "summary": "RHBZ#2519610",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519610"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-76220",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-76220"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-76220",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76220"
        },
        {
          "category": "external",
          "summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-wvpp-8hx9-p66j",
          "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-wvpp-8hx9-p66j"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/gitpython-before-command-execution-via-split-single-char-options",
          "url": "https://www.vulncheck.com/advisories/gitpython-before-command-execution-via-split-single-char-options"
        }
      ],
      "release_date": "2026-08-19T14:02:04.108000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T23:00:57+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
          "product_ids": [
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63385"
        },
        {
          "category": "workaround",
          "details": "Do not pass untrusted or attacker-influenced keyword arguments to GitPython\u0027s guarded methods such as clone_from, and do not set split_single_char_options=False on untrusted input. Upgrade to GitPython 3.1.58 or later, where the check_unsafe_options bypass is fixed.",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gitpython: GitPython: Arbitrary command execution via crafted kwargs"
    },
    {
      "cve": "CVE-2026-76221",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-08-19T14:12:02.928636+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2519596"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GitPython. This vulnerability allows attackers to inject malicious configuration options by manipulating option names within the option-name validator. By injecting special characters, an attacker can forge arbitrary git-config directives, potentially leading to arbitrary code execution on the system when a git operation is performed.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gitpython: GitPython: Arbitrary code execution via config-name injection",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "GitPython\u0027s option-name validator fails to neutralize equals signs, hash symbols, and whitespace in option names, letting an attacker who controls option names forge arbitrary git-config directives (e.g. `sshCommand = touch /tmp/RCE #`) that execute arbitrary commands via core.sshCommand or core.hooksPath on the next git operation, fixed in 3.1.58. Red Hat products that bundle GitPython use it as an internal build/automation-time dependency and do not expose git option names to adversary-controlled input; the vulnerable input cannot be controlled by an attacker in these products, so they are marked not affected. GitPython as shipped in Red Hat OpenStack Platform 16.2 and 17.1 contains the vulnerable library code and retains its affected determination.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
        ],
        "known_not_affected": [
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
          "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-76221"
        },
        {
          "category": "external",
          "summary": "RHBZ#2519596",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519596"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-76221",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-76221"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-76221",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76221"
        },
        {
          "category": "external",
          "summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-jm78-9fvv-mhgr",
          "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-jm78-9fvv-mhgr"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/gitpython-before-config-injection-via-option-name",
          "url": "https://www.vulncheck.com/advisories/gitpython-before-config-injection-via-option-name"
        }
      ],
      "release_date": "2026-08-19T14:02:04.795000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T23:00:57+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
          "product_ids": [
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63385"
        },
        {
          "category": "workaround",
          "details": "Do not pass untrusted or attacker-influenced git option names to GitPython. Upgrade to GitPython 3.1.58 or later, where option-name (config) injection is fixed.",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gitpython: GitPython: Arbitrary code execution via config-name injection"
    },
    {
      "cve": "CVE-2026-76222",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-08-19T14:13:14.104704+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2519609"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GitPython where it fails to properly validate submodule names within .gitmodules files. A remote attacker could craft a malicious Git repository containing specially formed submodule names with directory traversal sequences. When GitPython processes these malicious submodule names during repository initialization, it could lead to the creation of attacker-controlled Git repositories at arbitrary locations on the filesystem, potentially impacting system integrity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gitpython: GitPython: Arbitrary file creation via path traversal in .gitmodules submodule names",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "CVE-2026-76222 is a path-traversal flaw in GitPython submodule handling: cloning a malicious repository and initializing its submodules can create files or repositories outside the intended directory, because GitPython omits the suspicious-submodule-name guard that upstream core git enforces. Unlike the caller-gated GitPython option-forwarding flaws, this triggers during ordinary clone plus submodule initialization of an untrusted repository, so any Red Hat product that ships or bundles a vulnerable GitPython version is affected. Fixed in GitPython 3.1.58.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
        ],
        "known_not_affected": [
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
          "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
          "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
          "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
          "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
          "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
          "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
          "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
          "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
          "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
          "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
          "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
          "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-76222"
        },
        {
          "category": "external",
          "summary": "RHBZ#2519609",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519609"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-76222",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-76222"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-76222",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76222"
        },
        {
          "category": "external",
          "summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-hmq2-w58f-27jc",
          "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-hmq2-w58f-27jc"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/gitpython-before-path-traversal-via-gitmodules-submodule-name",
          "url": "https://www.vulncheck.com/advisories/gitpython-before-path-traversal-via-gitmodules-submodule-name"
        }
      ],
      "release_date": "2026-08-19T14:02:05.596000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T23:00:57+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
          "product_ids": [
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63385"
        },
        {
          "category": "workaround",
          "details": "There is no mitigation beyond not cloning or initializing git submodules from untrusted repositories. Upgrade to GitPython 3.1.58 or later when it becomes available.",
          "product_ids": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
            "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
            "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
            "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
            "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
            "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
            "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
            "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
            "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
            "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
            "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
            "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gitpython: GitPython: Arbitrary file creation via path traversal in .gitmodules submodule names"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…