RHSA-2026:67724

Vulnerability from csaf_redhat - Published: 2026-09-16 00:35 - Updated: 2026-09-21 17:07
Summary
Red Hat Security Advisory: Migration Toolkit for Applications
Severity
Important
Notes
Topic: A new version of Migration Toolkit for Applications (MTA) is now available.
Details: Migration Toolkit for Applications (MTA) accelerates large-scale application modernization efforts across hybrid cloud environments on Red Hat OpenShift. This solution provides insight throughout the adoption process, at both the portfolio and application levels: inventory, assess, analyze, and manage applications for faster migration to OpenShift via the user interface.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-69152

A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:6cfe1a3cb3be7857afb7c6c469d5f2ef3e6c39439896ea370fc6a7ecbb1541ff_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:e7bd712ae076820497e4f862165048d2d906de11db9baef1d3e293a3ecb5408b_arm64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:02616be21a5fab7760e69dd3ed58dee4341442d13e5eec157d2dccee490d1bcb_arm64 —
Workaround
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:fc437c8e16062da0690c2515171e1cd7d6f906dd827d7a3d482e3429fdf14e05_amd64 —
Workaround
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:c283ed95e4fb75820bcfe296b6e746df7dc2f5b3cc74aabe0ab0460c31e88f2d_amd64 —
Workaround
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:eb56e1d81af9a72f11976db564057a1be47394676e807ad583e61feaaf4207be_arm64 —
Workaround
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:52ab72052c3dc50051c7bca50adf7306df84064ac7bbe08d9e75f96cc4b068f9_arm64 —
Workaround
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:6143bd7238c6af113e16558f13d57fb5006a081548598438d6c40c55589110a3_amd64 —
Workaround
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:4665c73a39ee8c778e15946f7db6d602e2d38fa108f36b82f041ca8113f4239f_amd64 —
Workaround
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:dfbbd32389ec60a7fc26f31e2e5aa8b89c6ee430d00856613ca7103c4dff3828_arm64 —
Workaround
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:7250ec83be6cace1bd59745591df6ddc02ea35421384de804ba32bd51e7b50c1_arm64 —
Workaround
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:d6133e30119f504c5dd33ef1c30b7764143264aca5487267594bc64f3342e583_amd64 —
Workaround
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:4a8a09eaff889e43baa6a58b35c215c3902490e5278caa25f4dab43cdf8afea6_arm64 —
Workaround
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:518d2bf5e0c164dd47e84935cf21904ac40a099244aaeaaa0d3f7df697d1d2c9_amd64 —
Workaround
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:000a593acaebb6ddd6c9241ba8a77f44bf2ae3f20f07d9f59dc40cddb5312b30_amd64 —
Workaround
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:ce31e0aed326c61ba101514eeeb39c5b9fcf0526f0c8bb70c84ec5f5e49fc270_arm64 —
Workaround
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:50660cc42a2e7596416c8e60f5050bc06c49025052393c695bd439aa2ceb49cc_arm64 —
Workaround
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:e063a943d8401045cf46c5f82526b18831bd020a4d8613587a9809f9ce744b21_amd64 —
Workaround
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:6860e281fa01eedc297a0b5e043fea2b7ad3641278b31520043bb5014e751d76_amd64 —
Workaround
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:7bcb07d008c6a4bf727509eaecf389d9168b23709c236988d92c8a2fcbbc5776_amd64 —
Workaround
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d3a1412fd3be34d76cb420cf28ebd5faea18899837b1e2d405fcff3843d50cfd_arm64 —
Workaround
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:54054627942e35913975fe7ae8776d5cd52bb56bc86f138fd599445793fd730a_amd64 —
Workaround
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:b5afd3be03bb09a2d649e1e2bb5a07119b3f596843f1be2ed3f6ee6aee7c87a2_arm64 —
Workaround
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3da387379212bfac0c0bc18c0bd48a27294cbb8f2113a65c87a3c24b23c42673_arm64 —
Workaround
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:8340507434da15423d9405236d3574902d29e687aa4011705c7ff8fd95ce8881_amd64 —
Workaround
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:2f07290da5319e71cc2ac01a17398d9619e88a8fd7de4b65310cdcbe4b29f312_arm64 —
Workaround
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:cff08d56550c3d272072ff72f1bac9f1f05065e4eb9810ebf9e0c6696bc544a9_amd64 —
Workaround
Threats
Impact Important
CVE-2026-73569

A flaw was found in fast-xml-parser. A remote attacker could exploit this by submitting a specially crafted XML document containing multiple DOCTYPE declarations. These repeated declarations can reset internal entity expansion limits during parsing. This can lead to excessive CPU usage, event-loop blocking, and memory exhaustion, ultimately resulting in a Denial of Service (DoS) for the application processing the XML.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Affected products
Fixed 2 products, the same list as for CVE-2026-69152
Known not affected 25 products, the same list as for CVE-2026-69152
Threats
Impact Important
CVE-2026-82417

A flaw was found in qs. The `qs.stringify` function, responsible for serializing objects, does not properly validate the `isBuffer` property of an object's constructor before attempting to invoke it. An unauthenticated attacker can provide specially crafted input that, when processed and then serialized by `qs.stringify`, triggers a `TypeError`. This vulnerability can lead to a Denial of Service (DoS), causing affected applications to return a 500 error or, in certain scenarios, terminate the application process.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1287 - Improper Validation of Specified Type of Input
Affected products
Fixed 2 products, the same list as for CVE-2026-69152
Known not affected 25 products, the same list as for CVE-2026-69152
Threats
Impact Important
CVE-2026-84375

A flaw was found in js-yaml, a JavaScript YAML parser. An attacker can exploit this by providing a specially crafted YAML document that causes the parser to perform excessive processing when handling merge keys with empty sources. This can lead to prolonged CPU consumption, effectively causing a denial of service (DoS) for applications that process untrusted YAML input.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
Affected products
Fixed 2 products, the same list as for CVE-2026-69152
Known not affected 25 products, the same list as for CVE-2026-69152
Threats
Impact Moderate
References
URL Category
https://access.redhat.com/errata/RHSA-2026:67724 self
https://access.redhat.com/security/cve/CVE-2026-69152 external
https://access.redhat.com/security/cve/CVE-2026-73569 external
https://access.redhat.com/security/cve/CVE-2026-82417 external
https://access.redhat.com/security/cve/CVE-2026-84375 external
https://access.redhat.com/security/updates/classi… external
https://developers.redhat.com/products/mta/overview external
https://docs.redhat.com/en/documentation/migratio… external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-69152 self
https://bugzilla.redhat.com/show_bug.cgi?id=2510722 external
https://www.cve.org/CVERecord?id=CVE-2026-69152 external
https://nvd.nist.gov/vuln/detail/CVE-2026-69152 external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/s… external
https://access.redhat.com/security/cve/CVE-2026-73569 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515526 external
https://www.cve.org/CVERecord?id=CVE-2026-73569 external
https://nvd.nist.gov/vuln/detail/CVE-2026-73569 external
https://github.com/NaturalIntelligence/fast-xml-p… external
https://github.com/NaturalIntelligence/fast-xml-p… external
https://github.com/NaturalIntelligence/fast-xml-p… external
https://access.redhat.com/security/cve/CVE-2026-82417 self
https://bugzilla.redhat.com/show_bug.cgi?id=2525936 external
https://www.cve.org/CVERecord?id=CVE-2026-82417 external
https://nvd.nist.gov/vuln/detail/CVE-2026-82417 external
https://github.com/ljharb/qs/commit/e83d321ffafb3… external
https://github.com/ljharb/qs/security/advisories/… external
https://access.redhat.com/security/cve/CVE-2026-84375 self
https://bugzilla.redhat.com/show_bug.cgi?id=2527118 external
https://www.cve.org/CVERecord?id=CVE-2026-84375 external
https://nvd.nist.gov/vuln/detail/CVE-2026-84375 external
https://github.com/nodeca/js-yaml/commit/3485bc06… external
https://github.com/nodeca/js-yaml/commit/6a8e05f9… external
https://github.com/nodeca/js-yaml/commit/d90b6612… external
https://github.com/nodeca/js-yaml/pull/797 external
https://github.com/nodeca/js-yaml/releases/tag/3.15.2 external
https://github.com/nodeca/js-yaml/releases/tag/4.3.2 external
https://github.com/nodeca/js-yaml/security/adviso… external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "A new version of Migration Toolkit for Applications (MTA) is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Migration Toolkit for Applications (MTA) accelerates large-scale application modernization efforts across hybrid cloud environments on Red Hat OpenShift. \nThis solution provides insight throughout the adoption process, at both the portfolio and application levels: inventory, assess, analyze, and manage\napplications for faster migration to OpenShift via the user interface.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:67724",
        "url": "https://access.redhat.com/errata/RHSA-2026:67724"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-69152",
        "url": "https://access.redhat.com/security/cve/CVE-2026-69152"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-73569",
        "url": "https://access.redhat.com/security/cve/CVE-2026-73569"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-82417",
        "url": "https://access.redhat.com/security/cve/CVE-2026-82417"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-84375",
        "url": "https://access.redhat.com/security/cve/CVE-2026-84375"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://developers.redhat.com/products/mta/overview",
        "url": "https://developers.redhat.com/products/mta/overview"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/migration_toolkit_for_applications/",
        "url": "https://docs.redhat.com/en/documentation/migration_toolkit_for_applications/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67724.json"
      }
    ],
    "title": "Red Hat Security Advisory: Migration Toolkit for Applications",
    "tracking": {
      "current_release_date": "2026-09-21T17:07:24+00:00",
      "generator": {
        "date": "2026-09-21T17:07:24+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.0"
        }
      },
      "id": "RHSA-2026:67724",
      "initial_release_date": "2026-09-16T00:35:13+00:00",
      "revision_history": [
        {
          "date": "2026-09-16T00:35:13+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-16T00:35:35+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-21T17:07:24+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Migration Toolkit for Applications 8.2",
                "product": {
                  "name": "Red Hat Migration Toolkit for Applications 8.2",
                  "product_id": "Red Hat Migration Toolkit for Applications 8.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:migration_toolkit_applications:8.2::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Migration Toolkit for Applications"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:fc437c8e16062da0690c2515171e1cd7d6f906dd827d7a3d482e3429fdf14e05_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:fc437c8e16062da0690c2515171e1cd7d6f906dd827d7a3d482e3429fdf14e05_amd64",
                  "product_id": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:fc437c8e16062da0690c2515171e1cd7d6f906dd827d7a3d482e3429fdf14e05_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-analyzer-addon-rhel9@sha256%3Afc437c8e16062da0690c2515171e1cd7d6f906dd827d7a3d482e3429fdf14e05?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-analyzer-addon-rhel9\u0026tag=1789497785"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:c283ed95e4fb75820bcfe296b6e746df7dc2f5b3cc74aabe0ab0460c31e88f2d_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:c283ed95e4fb75820bcfe296b6e746df7dc2f5b3cc74aabe0ab0460c31e88f2d_amd64",
                  "product_id": "registry.redhat.io/mta/mta-cli-rhel9@sha256:c283ed95e4fb75820bcfe296b6e746df7dc2f5b3cc74aabe0ab0460c31e88f2d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-cli-rhel9@sha256%3Ac283ed95e4fb75820bcfe296b6e746df7dc2f5b3cc74aabe0ab0460c31e88f2d?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-cli-rhel9\u0026tag=1789505976"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:6143bd7238c6af113e16558f13d57fb5006a081548598438d6c40c55589110a3_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:6143bd7238c6af113e16558f13d57fb5006a081548598438d6c40c55589110a3_amd64",
                  "product_id": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:6143bd7238c6af113e16558f13d57fb5006a081548598438d6c40c55589110a3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-discovery-addon-rhel9@sha256%3A6143bd7238c6af113e16558f13d57fb5006a081548598438d6c40c55589110a3?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-discovery-addon-rhel9\u0026tag=1789496955"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:4665c73a39ee8c778e15946f7db6d602e2d38fa108f36b82f041ca8113f4239f_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:4665c73a39ee8c778e15946f7db6d602e2d38fa108f36b82f041ca8113f4239f_amd64",
                  "product_id": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:4665c73a39ee8c778e15946f7db6d602e2d38fa108f36b82f041ca8113f4239f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-dotnet-external-provider-rhel9@sha256%3A4665c73a39ee8c778e15946f7db6d602e2d38fa108f36b82f041ca8113f4239f?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-dotnet-external-provider-rhel9\u0026tag=1789496933"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:d6133e30119f504c5dd33ef1c30b7764143264aca5487267594bc64f3342e583_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:d6133e30119f504c5dd33ef1c30b7764143264aca5487267594bc64f3342e583_amd64",
                  "product_id": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:d6133e30119f504c5dd33ef1c30b7764143264aca5487267594bc64f3342e583_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-go-external-provider-rhel9@sha256%3Ad6133e30119f504c5dd33ef1c30b7764143264aca5487267594bc64f3342e583?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-go-external-provider-rhel9\u0026tag=1789505222"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:518d2bf5e0c164dd47e84935cf21904ac40a099244aaeaaa0d3f7df697d1d2c9_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:518d2bf5e0c164dd47e84935cf21904ac40a099244aaeaaa0d3f7df697d1d2c9_amd64",
                  "product_id": "registry.redhat.io/mta/mta-hub-rhel9@sha256:518d2bf5e0c164dd47e84935cf21904ac40a099244aaeaaa0d3f7df697d1d2c9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-hub-rhel9@sha256%3A518d2bf5e0c164dd47e84935cf21904ac40a099244aaeaaa0d3f7df697d1d2c9?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-hub-rhel9\u0026tag=1789497768"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:000a593acaebb6ddd6c9241ba8a77f44bf2ae3f20f07d9f59dc40cddb5312b30_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:000a593acaebb6ddd6c9241ba8a77f44bf2ae3f20f07d9f59dc40cddb5312b30_amd64",
                  "product_id": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:000a593acaebb6ddd6c9241ba8a77f44bf2ae3f20f07d9f59dc40cddb5312b30_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-java-external-provider-rhel9@sha256%3A000a593acaebb6ddd6c9241ba8a77f44bf2ae3f20f07d9f59dc40cddb5312b30?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-java-external-provider-rhel9\u0026tag=1789498311"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:e063a943d8401045cf46c5f82526b18831bd020a4d8613587a9809f9ce744b21_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:e063a943d8401045cf46c5f82526b18831bd020a4d8613587a9809f9ce744b21_amd64",
                  "product_id": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:e063a943d8401045cf46c5f82526b18831bd020a4d8613587a9809f9ce744b21_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-nodejs-external-provider-rhel9@sha256%3Ae063a943d8401045cf46c5f82526b18831bd020a4d8613587a9809f9ce744b21?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-nodejs-external-provider-rhel9\u0026tag=1789496964"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:8340507434da15423d9405236d3574902d29e687aa4011705c7ff8fd95ce8881_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:8340507434da15423d9405236d3574902d29e687aa4011705c7ff8fd95ce8881_amd64",
                  "product_id": "registry.redhat.io/mta/mta-rhel9-operator@sha256:8340507434da15423d9405236d3574902d29e687aa4011705c7ff8fd95ce8881_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-rhel9-operator@sha256%3A8340507434da15423d9405236d3574902d29e687aa4011705c7ff8fd95ce8881?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-rhel9-operator\u0026tag=1789505238"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-operator-bundle@sha256:6860e281fa01eedc297a0b5e043fea2b7ad3641278b31520043bb5014e751d76_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-operator-bundle@sha256:6860e281fa01eedc297a0b5e043fea2b7ad3641278b31520043bb5014e751d76_amd64",
                  "product_id": "registry.redhat.io/mta/mta-operator-bundle@sha256:6860e281fa01eedc297a0b5e043fea2b7ad3641278b31520043bb5014e751d76_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-operator-bundle@sha256%3A6860e281fa01eedc297a0b5e043fea2b7ad3641278b31520043bb5014e751d76?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-operator-bundle\u0026tag=1789507078"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:7bcb07d008c6a4bf727509eaecf389d9168b23709c236988d92c8a2fcbbc5776_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:7bcb07d008c6a4bf727509eaecf389d9168b23709c236988d92c8a2fcbbc5776_amd64",
                  "product_id": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:7bcb07d008c6a4bf727509eaecf389d9168b23709c236988d92c8a2fcbbc5776_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-platform-addon-rhel9@sha256%3A7bcb07d008c6a4bf727509eaecf389d9168b23709c236988d92c8a2fcbbc5776?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-platform-addon-rhel9\u0026tag=1789496952"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:54054627942e35913975fe7ae8776d5cd52bb56bc86f138fd599445793fd730a_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:54054627942e35913975fe7ae8776d5cd52bb56bc86f138fd599445793fd730a_amd64",
                  "product_id": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:54054627942e35913975fe7ae8776d5cd52bb56bc86f138fd599445793fd730a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-python-external-provider-rhel9@sha256%3A54054627942e35913975fe7ae8776d5cd52bb56bc86f138fd599445793fd730a?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-python-external-provider-rhel9\u0026tag=1789497000"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:cff08d56550c3d272072ff72f1bac9f1f05065e4eb9810ebf9e0c6696bc544a9_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:cff08d56550c3d272072ff72f1bac9f1f05065e4eb9810ebf9e0c6696bc544a9_amd64",
                  "product_id": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:cff08d56550c3d272072ff72f1bac9f1f05065e4eb9810ebf9e0c6696bc544a9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-solution-server-rhel9@sha256%3Acff08d56550c3d272072ff72f1bac9f1f05065e4eb9810ebf9e0c6696bc544a9?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-solution-server-rhel9\u0026tag=1789496937"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:6cfe1a3cb3be7857afb7c6c469d5f2ef3e6c39439896ea370fc6a7ecbb1541ff_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:6cfe1a3cb3be7857afb7c6c469d5f2ef3e6c39439896ea370fc6a7ecbb1541ff_amd64",
                  "product_id": "registry.redhat.io/mta/mta-ui-rhel9@sha256:6cfe1a3cb3be7857afb7c6c469d5f2ef3e6c39439896ea370fc6a7ecbb1541ff_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-ui-rhel9@sha256%3A6cfe1a3cb3be7857afb7c6c469d5f2ef3e6c39439896ea370fc6a7ecbb1541ff?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-ui-rhel9\u0026tag=1789446780"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:02616be21a5fab7760e69dd3ed58dee4341442d13e5eec157d2dccee490d1bcb_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:02616be21a5fab7760e69dd3ed58dee4341442d13e5eec157d2dccee490d1bcb_arm64",
                  "product_id": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:02616be21a5fab7760e69dd3ed58dee4341442d13e5eec157d2dccee490d1bcb_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-analyzer-addon-rhel9@sha256%3A02616be21a5fab7760e69dd3ed58dee4341442d13e5eec157d2dccee490d1bcb?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-analyzer-addon-rhel9\u0026tag=1789497785"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:eb56e1d81af9a72f11976db564057a1be47394676e807ad583e61feaaf4207be_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:eb56e1d81af9a72f11976db564057a1be47394676e807ad583e61feaaf4207be_arm64",
                  "product_id": "registry.redhat.io/mta/mta-cli-rhel9@sha256:eb56e1d81af9a72f11976db564057a1be47394676e807ad583e61feaaf4207be_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-cli-rhel9@sha256%3Aeb56e1d81af9a72f11976db564057a1be47394676e807ad583e61feaaf4207be?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-cli-rhel9\u0026tag=1789505976"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:52ab72052c3dc50051c7bca50adf7306df84064ac7bbe08d9e75f96cc4b068f9_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:52ab72052c3dc50051c7bca50adf7306df84064ac7bbe08d9e75f96cc4b068f9_arm64",
                  "product_id": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:52ab72052c3dc50051c7bca50adf7306df84064ac7bbe08d9e75f96cc4b068f9_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-discovery-addon-rhel9@sha256%3A52ab72052c3dc50051c7bca50adf7306df84064ac7bbe08d9e75f96cc4b068f9?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-discovery-addon-rhel9\u0026tag=1789496955"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:dfbbd32389ec60a7fc26f31e2e5aa8b89c6ee430d00856613ca7103c4dff3828_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:dfbbd32389ec60a7fc26f31e2e5aa8b89c6ee430d00856613ca7103c4dff3828_arm64",
                  "product_id": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:dfbbd32389ec60a7fc26f31e2e5aa8b89c6ee430d00856613ca7103c4dff3828_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-dotnet-external-provider-rhel9@sha256%3Adfbbd32389ec60a7fc26f31e2e5aa8b89c6ee430d00856613ca7103c4dff3828?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-dotnet-external-provider-rhel9\u0026tag=1789496933"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:7250ec83be6cace1bd59745591df6ddc02ea35421384de804ba32bd51e7b50c1_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:7250ec83be6cace1bd59745591df6ddc02ea35421384de804ba32bd51e7b50c1_arm64",
                  "product_id": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:7250ec83be6cace1bd59745591df6ddc02ea35421384de804ba32bd51e7b50c1_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-go-external-provider-rhel9@sha256%3A7250ec83be6cace1bd59745591df6ddc02ea35421384de804ba32bd51e7b50c1?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-go-external-provider-rhel9\u0026tag=1789505222"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:4a8a09eaff889e43baa6a58b35c215c3902490e5278caa25f4dab43cdf8afea6_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:4a8a09eaff889e43baa6a58b35c215c3902490e5278caa25f4dab43cdf8afea6_arm64",
                  "product_id": "registry.redhat.io/mta/mta-hub-rhel9@sha256:4a8a09eaff889e43baa6a58b35c215c3902490e5278caa25f4dab43cdf8afea6_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-hub-rhel9@sha256%3A4a8a09eaff889e43baa6a58b35c215c3902490e5278caa25f4dab43cdf8afea6?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-hub-rhel9\u0026tag=1789497768"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:ce31e0aed326c61ba101514eeeb39c5b9fcf0526f0c8bb70c84ec5f5e49fc270_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:ce31e0aed326c61ba101514eeeb39c5b9fcf0526f0c8bb70c84ec5f5e49fc270_arm64",
                  "product_id": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:ce31e0aed326c61ba101514eeeb39c5b9fcf0526f0c8bb70c84ec5f5e49fc270_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-java-external-provider-rhel9@sha256%3Ace31e0aed326c61ba101514eeeb39c5b9fcf0526f0c8bb70c84ec5f5e49fc270?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-java-external-provider-rhel9\u0026tag=1789498311"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:50660cc42a2e7596416c8e60f5050bc06c49025052393c695bd439aa2ceb49cc_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:50660cc42a2e7596416c8e60f5050bc06c49025052393c695bd439aa2ceb49cc_arm64",
                  "product_id": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:50660cc42a2e7596416c8e60f5050bc06c49025052393c695bd439aa2ceb49cc_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-nodejs-external-provider-rhel9@sha256%3A50660cc42a2e7596416c8e60f5050bc06c49025052393c695bd439aa2ceb49cc?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-nodejs-external-provider-rhel9\u0026tag=1789496964"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:3da387379212bfac0c0bc18c0bd48a27294cbb8f2113a65c87a3c24b23c42673_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:3da387379212bfac0c0bc18c0bd48a27294cbb8f2113a65c87a3c24b23c42673_arm64",
                  "product_id": "registry.redhat.io/mta/mta-rhel9-operator@sha256:3da387379212bfac0c0bc18c0bd48a27294cbb8f2113a65c87a3c24b23c42673_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-rhel9-operator@sha256%3A3da387379212bfac0c0bc18c0bd48a27294cbb8f2113a65c87a3c24b23c42673?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-rhel9-operator\u0026tag=1789505238"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d3a1412fd3be34d76cb420cf28ebd5faea18899837b1e2d405fcff3843d50cfd_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d3a1412fd3be34d76cb420cf28ebd5faea18899837b1e2d405fcff3843d50cfd_arm64",
                  "product_id": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d3a1412fd3be34d76cb420cf28ebd5faea18899837b1e2d405fcff3843d50cfd_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-platform-addon-rhel9@sha256%3Ad3a1412fd3be34d76cb420cf28ebd5faea18899837b1e2d405fcff3843d50cfd?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-platform-addon-rhel9\u0026tag=1789496952"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:b5afd3be03bb09a2d649e1e2bb5a07119b3f596843f1be2ed3f6ee6aee7c87a2_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:b5afd3be03bb09a2d649e1e2bb5a07119b3f596843f1be2ed3f6ee6aee7c87a2_arm64",
                  "product_id": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:b5afd3be03bb09a2d649e1e2bb5a07119b3f596843f1be2ed3f6ee6aee7c87a2_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-python-external-provider-rhel9@sha256%3Ab5afd3be03bb09a2d649e1e2bb5a07119b3f596843f1be2ed3f6ee6aee7c87a2?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-python-external-provider-rhel9\u0026tag=1789497000"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:2f07290da5319e71cc2ac01a17398d9619e88a8fd7de4b65310cdcbe4b29f312_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:2f07290da5319e71cc2ac01a17398d9619e88a8fd7de4b65310cdcbe4b29f312_arm64",
                  "product_id": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:2f07290da5319e71cc2ac01a17398d9619e88a8fd7de4b65310cdcbe4b29f312_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-solution-server-rhel9@sha256%3A2f07290da5319e71cc2ac01a17398d9619e88a8fd7de4b65310cdcbe4b29f312?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-solution-server-rhel9\u0026tag=1789496937"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:e7bd712ae076820497e4f862165048d2d906de11db9baef1d3e293a3ecb5408b_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:e7bd712ae076820497e4f862165048d2d906de11db9baef1d3e293a3ecb5408b_arm64",
                  "product_id": "registry.redhat.io/mta/mta-ui-rhel9@sha256:e7bd712ae076820497e4f862165048d2d906de11db9baef1d3e293a3ecb5408b_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-ui-rhel9@sha256%3Ae7bd712ae076820497e4f862165048d2d906de11db9baef1d3e293a3ecb5408b?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-ui-rhel9\u0026tag=1789446780"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:02616be21a5fab7760e69dd3ed58dee4341442d13e5eec157d2dccee490d1bcb_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:02616be21a5fab7760e69dd3ed58dee4341442d13e5eec157d2dccee490d1bcb_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:02616be21a5fab7760e69dd3ed58dee4341442d13e5eec157d2dccee490d1bcb_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:fc437c8e16062da0690c2515171e1cd7d6f906dd827d7a3d482e3429fdf14e05_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:fc437c8e16062da0690c2515171e1cd7d6f906dd827d7a3d482e3429fdf14e05_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:fc437c8e16062da0690c2515171e1cd7d6f906dd827d7a3d482e3429fdf14e05_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:c283ed95e4fb75820bcfe296b6e746df7dc2f5b3cc74aabe0ab0460c31e88f2d_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:c283ed95e4fb75820bcfe296b6e746df7dc2f5b3cc74aabe0ab0460c31e88f2d_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-cli-rhel9@sha256:c283ed95e4fb75820bcfe296b6e746df7dc2f5b3cc74aabe0ab0460c31e88f2d_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:eb56e1d81af9a72f11976db564057a1be47394676e807ad583e61feaaf4207be_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:eb56e1d81af9a72f11976db564057a1be47394676e807ad583e61feaaf4207be_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-cli-rhel9@sha256:eb56e1d81af9a72f11976db564057a1be47394676e807ad583e61feaaf4207be_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:52ab72052c3dc50051c7bca50adf7306df84064ac7bbe08d9e75f96cc4b068f9_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:52ab72052c3dc50051c7bca50adf7306df84064ac7bbe08d9e75f96cc4b068f9_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:52ab72052c3dc50051c7bca50adf7306df84064ac7bbe08d9e75f96cc4b068f9_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:6143bd7238c6af113e16558f13d57fb5006a081548598438d6c40c55589110a3_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:6143bd7238c6af113e16558f13d57fb5006a081548598438d6c40c55589110a3_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:6143bd7238c6af113e16558f13d57fb5006a081548598438d6c40c55589110a3_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:4665c73a39ee8c778e15946f7db6d602e2d38fa108f36b82f041ca8113f4239f_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:4665c73a39ee8c778e15946f7db6d602e2d38fa108f36b82f041ca8113f4239f_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:4665c73a39ee8c778e15946f7db6d602e2d38fa108f36b82f041ca8113f4239f_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:dfbbd32389ec60a7fc26f31e2e5aa8b89c6ee430d00856613ca7103c4dff3828_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:dfbbd32389ec60a7fc26f31e2e5aa8b89c6ee430d00856613ca7103c4dff3828_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:dfbbd32389ec60a7fc26f31e2e5aa8b89c6ee430d00856613ca7103c4dff3828_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:7250ec83be6cace1bd59745591df6ddc02ea35421384de804ba32bd51e7b50c1_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:7250ec83be6cace1bd59745591df6ddc02ea35421384de804ba32bd51e7b50c1_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:7250ec83be6cace1bd59745591df6ddc02ea35421384de804ba32bd51e7b50c1_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:d6133e30119f504c5dd33ef1c30b7764143264aca5487267594bc64f3342e583_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:d6133e30119f504c5dd33ef1c30b7764143264aca5487267594bc64f3342e583_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:d6133e30119f504c5dd33ef1c30b7764143264aca5487267594bc64f3342e583_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:4a8a09eaff889e43baa6a58b35c215c3902490e5278caa25f4dab43cdf8afea6_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:4a8a09eaff889e43baa6a58b35c215c3902490e5278caa25f4dab43cdf8afea6_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-hub-rhel9@sha256:4a8a09eaff889e43baa6a58b35c215c3902490e5278caa25f4dab43cdf8afea6_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:518d2bf5e0c164dd47e84935cf21904ac40a099244aaeaaa0d3f7df697d1d2c9_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:518d2bf5e0c164dd47e84935cf21904ac40a099244aaeaaa0d3f7df697d1d2c9_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-hub-rhel9@sha256:518d2bf5e0c164dd47e84935cf21904ac40a099244aaeaaa0d3f7df697d1d2c9_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:000a593acaebb6ddd6c9241ba8a77f44bf2ae3f20f07d9f59dc40cddb5312b30_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:000a593acaebb6ddd6c9241ba8a77f44bf2ae3f20f07d9f59dc40cddb5312b30_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:000a593acaebb6ddd6c9241ba8a77f44bf2ae3f20f07d9f59dc40cddb5312b30_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:ce31e0aed326c61ba101514eeeb39c5b9fcf0526f0c8bb70c84ec5f5e49fc270_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:ce31e0aed326c61ba101514eeeb39c5b9fcf0526f0c8bb70c84ec5f5e49fc270_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:ce31e0aed326c61ba101514eeeb39c5b9fcf0526f0c8bb70c84ec5f5e49fc270_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:50660cc42a2e7596416c8e60f5050bc06c49025052393c695bd439aa2ceb49cc_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:50660cc42a2e7596416c8e60f5050bc06c49025052393c695bd439aa2ceb49cc_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:50660cc42a2e7596416c8e60f5050bc06c49025052393c695bd439aa2ceb49cc_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:e063a943d8401045cf46c5f82526b18831bd020a4d8613587a9809f9ce744b21_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:e063a943d8401045cf46c5f82526b18831bd020a4d8613587a9809f9ce744b21_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:e063a943d8401045cf46c5f82526b18831bd020a4d8613587a9809f9ce744b21_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-operator-bundle@sha256:6860e281fa01eedc297a0b5e043fea2b7ad3641278b31520043bb5014e751d76_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:6860e281fa01eedc297a0b5e043fea2b7ad3641278b31520043bb5014e751d76_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-operator-bundle@sha256:6860e281fa01eedc297a0b5e043fea2b7ad3641278b31520043bb5014e751d76_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:7bcb07d008c6a4bf727509eaecf389d9168b23709c236988d92c8a2fcbbc5776_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:7bcb07d008c6a4bf727509eaecf389d9168b23709c236988d92c8a2fcbbc5776_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:7bcb07d008c6a4bf727509eaecf389d9168b23709c236988d92c8a2fcbbc5776_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d3a1412fd3be34d76cb420cf28ebd5faea18899837b1e2d405fcff3843d50cfd_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d3a1412fd3be34d76cb420cf28ebd5faea18899837b1e2d405fcff3843d50cfd_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d3a1412fd3be34d76cb420cf28ebd5faea18899837b1e2d405fcff3843d50cfd_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:54054627942e35913975fe7ae8776d5cd52bb56bc86f138fd599445793fd730a_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:54054627942e35913975fe7ae8776d5cd52bb56bc86f138fd599445793fd730a_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:54054627942e35913975fe7ae8776d5cd52bb56bc86f138fd599445793fd730a_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:b5afd3be03bb09a2d649e1e2bb5a07119b3f596843f1be2ed3f6ee6aee7c87a2_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:b5afd3be03bb09a2d649e1e2bb5a07119b3f596843f1be2ed3f6ee6aee7c87a2_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:b5afd3be03bb09a2d649e1e2bb5a07119b3f596843f1be2ed3f6ee6aee7c87a2_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:3da387379212bfac0c0bc18c0bd48a27294cbb8f2113a65c87a3c24b23c42673_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3da387379212bfac0c0bc18c0bd48a27294cbb8f2113a65c87a3c24b23c42673_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-rhel9-operator@sha256:3da387379212bfac0c0bc18c0bd48a27294cbb8f2113a65c87a3c24b23c42673_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:8340507434da15423d9405236d3574902d29e687aa4011705c7ff8fd95ce8881_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:8340507434da15423d9405236d3574902d29e687aa4011705c7ff8fd95ce8881_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-rhel9-operator@sha256:8340507434da15423d9405236d3574902d29e687aa4011705c7ff8fd95ce8881_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:2f07290da5319e71cc2ac01a17398d9619e88a8fd7de4b65310cdcbe4b29f312_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:2f07290da5319e71cc2ac01a17398d9619e88a8fd7de4b65310cdcbe4b29f312_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:2f07290da5319e71cc2ac01a17398d9619e88a8fd7de4b65310cdcbe4b29f312_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:cff08d56550c3d272072ff72f1bac9f1f05065e4eb9810ebf9e0c6696bc544a9_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:cff08d56550c3d272072ff72f1bac9f1f05065e4eb9810ebf9e0c6696bc544a9_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:cff08d56550c3d272072ff72f1bac9f1f05065e4eb9810ebf9e0c6696bc544a9_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:6cfe1a3cb3be7857afb7c6c469d5f2ef3e6c39439896ea370fc6a7ecbb1541ff_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:6cfe1a3cb3be7857afb7c6c469d5f2ef3e6c39439896ea370fc6a7ecbb1541ff_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-ui-rhel9@sha256:6cfe1a3cb3be7857afb7c6c469d5f2ef3e6c39439896ea370fc6a7ecbb1541ff_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:e7bd712ae076820497e4f862165048d2d906de11db9baef1d3e293a3ecb5408b_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:e7bd712ae076820497e4f862165048d2d906de11db9baef1d3e293a3ecb5408b_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-ui-rhel9@sha256:e7bd712ae076820497e4f862165048d2d906de11db9baef1d3e293a3ecb5408b_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-69152",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-03T18:01:13.566423+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:02616be21a5fab7760e69dd3ed58dee4341442d13e5eec157d2dccee490d1bcb_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:fc437c8e16062da0690c2515171e1cd7d6f906dd827d7a3d482e3429fdf14e05_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:c283ed95e4fb75820bcfe296b6e746df7dc2f5b3cc74aabe0ab0460c31e88f2d_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:eb56e1d81af9a72f11976db564057a1be47394676e807ad583e61feaaf4207be_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:52ab72052c3dc50051c7bca50adf7306df84064ac7bbe08d9e75f96cc4b068f9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:6143bd7238c6af113e16558f13d57fb5006a081548598438d6c40c55589110a3_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:4665c73a39ee8c778e15946f7db6d602e2d38fa108f36b82f041ca8113f4239f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:dfbbd32389ec60a7fc26f31e2e5aa8b89c6ee430d00856613ca7103c4dff3828_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:7250ec83be6cace1bd59745591df6ddc02ea35421384de804ba32bd51e7b50c1_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:d6133e30119f504c5dd33ef1c30b7764143264aca5487267594bc64f3342e583_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:4a8a09eaff889e43baa6a58b35c215c3902490e5278caa25f4dab43cdf8afea6_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:518d2bf5e0c164dd47e84935cf21904ac40a099244aaeaaa0d3f7df697d1d2c9_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:000a593acaebb6ddd6c9241ba8a77f44bf2ae3f20f07d9f59dc40cddb5312b30_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:ce31e0aed326c61ba101514eeeb39c5b9fcf0526f0c8bb70c84ec5f5e49fc270_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:50660cc42a2e7596416c8e60f5050bc06c49025052393c695bd439aa2ceb49cc_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:e063a943d8401045cf46c5f82526b18831bd020a4d8613587a9809f9ce744b21_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:6860e281fa01eedc297a0b5e043fea2b7ad3641278b31520043bb5014e751d76_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:7bcb07d008c6a4bf727509eaecf389d9168b23709c236988d92c8a2fcbbc5776_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d3a1412fd3be34d76cb420cf28ebd5faea18899837b1e2d405fcff3843d50cfd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:54054627942e35913975fe7ae8776d5cd52bb56bc86f138fd599445793fd730a_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:b5afd3be03bb09a2d649e1e2bb5a07119b3f596843f1be2ed3f6ee6aee7c87a2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3da387379212bfac0c0bc18c0bd48a27294cbb8f2113a65c87a3c24b23c42673_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:8340507434da15423d9405236d3574902d29e687aa4011705c7ff8fd95ce8881_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:2f07290da5319e71cc2ac01a17398d9619e88a8fd7de4b65310cdcbe4b29f312_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:cff08d56550c3d272072ff72f1bac9f1f05065e4eb9810ebf9e0c6696bc544a9_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510722"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Any applications that pass user-controlled input to the `expand()` function are vulnerable to this issue. This flaw can result in an excessive consumption of memory that eventually terminates the process or blocks the event loop, both causing a denial of service. As this vulnerability allows a remote attacker to cause a denial of service, it has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:6cfe1a3cb3be7857afb7c6c469d5f2ef3e6c39439896ea370fc6a7ecbb1541ff_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:e7bd712ae076820497e4f862165048d2d906de11db9baef1d3e293a3ecb5408b_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:02616be21a5fab7760e69dd3ed58dee4341442d13e5eec157d2dccee490d1bcb_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:fc437c8e16062da0690c2515171e1cd7d6f906dd827d7a3d482e3429fdf14e05_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:c283ed95e4fb75820bcfe296b6e746df7dc2f5b3cc74aabe0ab0460c31e88f2d_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:eb56e1d81af9a72f11976db564057a1be47394676e807ad583e61feaaf4207be_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:52ab72052c3dc50051c7bca50adf7306df84064ac7bbe08d9e75f96cc4b068f9_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:6143bd7238c6af113e16558f13d57fb5006a081548598438d6c40c55589110a3_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:4665c73a39ee8c778e15946f7db6d602e2d38fa108f36b82f041ca8113f4239f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:dfbbd32389ec60a7fc26f31e2e5aa8b89c6ee430d00856613ca7103c4dff3828_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:7250ec83be6cace1bd59745591df6ddc02ea35421384de804ba32bd51e7b50c1_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:d6133e30119f504c5dd33ef1c30b7764143264aca5487267594bc64f3342e583_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:4a8a09eaff889e43baa6a58b35c215c3902490e5278caa25f4dab43cdf8afea6_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:518d2bf5e0c164dd47e84935cf21904ac40a099244aaeaaa0d3f7df697d1d2c9_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:000a593acaebb6ddd6c9241ba8a77f44bf2ae3f20f07d9f59dc40cddb5312b30_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:ce31e0aed326c61ba101514eeeb39c5b9fcf0526f0c8bb70c84ec5f5e49fc270_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:50660cc42a2e7596416c8e60f5050bc06c49025052393c695bd439aa2ceb49cc_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:e063a943d8401045cf46c5f82526b18831bd020a4d8613587a9809f9ce744b21_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:6860e281fa01eedc297a0b5e043fea2b7ad3641278b31520043bb5014e751d76_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:7bcb07d008c6a4bf727509eaecf389d9168b23709c236988d92c8a2fcbbc5776_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d3a1412fd3be34d76cb420cf28ebd5faea18899837b1e2d405fcff3843d50cfd_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:54054627942e35913975fe7ae8776d5cd52bb56bc86f138fd599445793fd730a_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:b5afd3be03bb09a2d649e1e2bb5a07119b3f596843f1be2ed3f6ee6aee7c87a2_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3da387379212bfac0c0bc18c0bd48a27294cbb8f2113a65c87a3c24b23c42673_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:8340507434da15423d9405236d3574902d29e687aa4011705c7ff8fd95ce8881_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:2f07290da5319e71cc2ac01a17398d9619e88a8fd7de4b65310cdcbe4b29f312_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:cff08d56550c3d272072ff72f1bac9f1f05065e4eb9810ebf9e0c6696bc544a9_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510722",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510722"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-69152",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69152",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d",
          "url": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac",
          "url": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf",
          "url": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031",
          "url": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895",
          "url": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895"
        }
      ],
      "release_date": "2026-08-03T16:33:36.324000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T00:35:13+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:6cfe1a3cb3be7857afb7c6c469d5f2ef3e6c39439896ea370fc6a7ecbb1541ff_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:e7bd712ae076820497e4f862165048d2d906de11db9baef1d3e293a3ecb5408b_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67724"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, do not pass untrusted input to the expand() function.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:02616be21a5fab7760e69dd3ed58dee4341442d13e5eec157d2dccee490d1bcb_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:fc437c8e16062da0690c2515171e1cd7d6f906dd827d7a3d482e3429fdf14e05_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:c283ed95e4fb75820bcfe296b6e746df7dc2f5b3cc74aabe0ab0460c31e88f2d_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:eb56e1d81af9a72f11976db564057a1be47394676e807ad583e61feaaf4207be_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:52ab72052c3dc50051c7bca50adf7306df84064ac7bbe08d9e75f96cc4b068f9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:6143bd7238c6af113e16558f13d57fb5006a081548598438d6c40c55589110a3_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:4665c73a39ee8c778e15946f7db6d602e2d38fa108f36b82f041ca8113f4239f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:dfbbd32389ec60a7fc26f31e2e5aa8b89c6ee430d00856613ca7103c4dff3828_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:7250ec83be6cace1bd59745591df6ddc02ea35421384de804ba32bd51e7b50c1_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:d6133e30119f504c5dd33ef1c30b7764143264aca5487267594bc64f3342e583_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:4a8a09eaff889e43baa6a58b35c215c3902490e5278caa25f4dab43cdf8afea6_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:518d2bf5e0c164dd47e84935cf21904ac40a099244aaeaaa0d3f7df697d1d2c9_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:000a593acaebb6ddd6c9241ba8a77f44bf2ae3f20f07d9f59dc40cddb5312b30_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:ce31e0aed326c61ba101514eeeb39c5b9fcf0526f0c8bb70c84ec5f5e49fc270_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:50660cc42a2e7596416c8e60f5050bc06c49025052393c695bd439aa2ceb49cc_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:e063a943d8401045cf46c5f82526b18831bd020a4d8613587a9809f9ce744b21_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:6860e281fa01eedc297a0b5e043fea2b7ad3641278b31520043bb5014e751d76_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:7bcb07d008c6a4bf727509eaecf389d9168b23709c236988d92c8a2fcbbc5776_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d3a1412fd3be34d76cb420cf28ebd5faea18899837b1e2d405fcff3843d50cfd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:54054627942e35913975fe7ae8776d5cd52bb56bc86f138fd599445793fd730a_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:b5afd3be03bb09a2d649e1e2bb5a07119b3f596843f1be2ed3f6ee6aee7c87a2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3da387379212bfac0c0bc18c0bd48a27294cbb8f2113a65c87a3c24b23c42673_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:8340507434da15423d9405236d3574902d29e687aa4011705c7ff8fd95ce8881_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:2f07290da5319e71cc2ac01a17398d9619e88a8fd7de4b65310cdcbe4b29f312_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:cff08d56550c3d272072ff72f1bac9f1f05065e4eb9810ebf9e0c6696bc544a9_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:6cfe1a3cb3be7857afb7c6c469d5f2ef3e6c39439896ea370fc6a7ecbb1541ff_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:e7bd712ae076820497e4f862165048d2d906de11db9baef1d3e293a3ecb5408b_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:02616be21a5fab7760e69dd3ed58dee4341442d13e5eec157d2dccee490d1bcb_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:fc437c8e16062da0690c2515171e1cd7d6f906dd827d7a3d482e3429fdf14e05_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:c283ed95e4fb75820bcfe296b6e746df7dc2f5b3cc74aabe0ab0460c31e88f2d_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:eb56e1d81af9a72f11976db564057a1be47394676e807ad583e61feaaf4207be_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:52ab72052c3dc50051c7bca50adf7306df84064ac7bbe08d9e75f96cc4b068f9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:6143bd7238c6af113e16558f13d57fb5006a081548598438d6c40c55589110a3_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:4665c73a39ee8c778e15946f7db6d602e2d38fa108f36b82f041ca8113f4239f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:dfbbd32389ec60a7fc26f31e2e5aa8b89c6ee430d00856613ca7103c4dff3828_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:7250ec83be6cace1bd59745591df6ddc02ea35421384de804ba32bd51e7b50c1_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:d6133e30119f504c5dd33ef1c30b7764143264aca5487267594bc64f3342e583_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:4a8a09eaff889e43baa6a58b35c215c3902490e5278caa25f4dab43cdf8afea6_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:518d2bf5e0c164dd47e84935cf21904ac40a099244aaeaaa0d3f7df697d1d2c9_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:000a593acaebb6ddd6c9241ba8a77f44bf2ae3f20f07d9f59dc40cddb5312b30_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:ce31e0aed326c61ba101514eeeb39c5b9fcf0526f0c8bb70c84ec5f5e49fc270_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:50660cc42a2e7596416c8e60f5050bc06c49025052393c695bd439aa2ceb49cc_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:e063a943d8401045cf46c5f82526b18831bd020a4d8613587a9809f9ce744b21_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:6860e281fa01eedc297a0b5e043fea2b7ad3641278b31520043bb5014e751d76_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:7bcb07d008c6a4bf727509eaecf389d9168b23709c236988d92c8a2fcbbc5776_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d3a1412fd3be34d76cb420cf28ebd5faea18899837b1e2d405fcff3843d50cfd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:54054627942e35913975fe7ae8776d5cd52bb56bc86f138fd599445793fd730a_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:b5afd3be03bb09a2d649e1e2bb5a07119b3f596843f1be2ed3f6ee6aee7c87a2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3da387379212bfac0c0bc18c0bd48a27294cbb8f2113a65c87a3c24b23c42673_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:8340507434da15423d9405236d3574902d29e687aa4011705c7ff8fd95ce8881_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:2f07290da5319e71cc2ac01a17398d9619e88a8fd7de4b65310cdcbe4b29f312_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:cff08d56550c3d272072ff72f1bac9f1f05065e4eb9810ebf9e0c6696bc544a9_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:6cfe1a3cb3be7857afb7c6c469d5f2ef3e6c39439896ea370fc6a7ecbb1541ff_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:e7bd712ae076820497e4f862165048d2d906de11db9baef1d3e293a3ecb5408b_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation"
    },
    {
      "cve": "CVE-2026-73569",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T18:11:11.490975+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:02616be21a5fab7760e69dd3ed58dee4341442d13e5eec157d2dccee490d1bcb_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:fc437c8e16062da0690c2515171e1cd7d6f906dd827d7a3d482e3429fdf14e05_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:c283ed95e4fb75820bcfe296b6e746df7dc2f5b3cc74aabe0ab0460c31e88f2d_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:eb56e1d81af9a72f11976db564057a1be47394676e807ad583e61feaaf4207be_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:52ab72052c3dc50051c7bca50adf7306df84064ac7bbe08d9e75f96cc4b068f9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:6143bd7238c6af113e16558f13d57fb5006a081548598438d6c40c55589110a3_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:4665c73a39ee8c778e15946f7db6d602e2d38fa108f36b82f041ca8113f4239f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:dfbbd32389ec60a7fc26f31e2e5aa8b89c6ee430d00856613ca7103c4dff3828_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:7250ec83be6cace1bd59745591df6ddc02ea35421384de804ba32bd51e7b50c1_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:d6133e30119f504c5dd33ef1c30b7764143264aca5487267594bc64f3342e583_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:4a8a09eaff889e43baa6a58b35c215c3902490e5278caa25f4dab43cdf8afea6_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:518d2bf5e0c164dd47e84935cf21904ac40a099244aaeaaa0d3f7df697d1d2c9_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:000a593acaebb6ddd6c9241ba8a77f44bf2ae3f20f07d9f59dc40cddb5312b30_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:ce31e0aed326c61ba101514eeeb39c5b9fcf0526f0c8bb70c84ec5f5e49fc270_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:50660cc42a2e7596416c8e60f5050bc06c49025052393c695bd439aa2ceb49cc_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:e063a943d8401045cf46c5f82526b18831bd020a4d8613587a9809f9ce744b21_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:6860e281fa01eedc297a0b5e043fea2b7ad3641278b31520043bb5014e751d76_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:7bcb07d008c6a4bf727509eaecf389d9168b23709c236988d92c8a2fcbbc5776_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d3a1412fd3be34d76cb420cf28ebd5faea18899837b1e2d405fcff3843d50cfd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:54054627942e35913975fe7ae8776d5cd52bb56bc86f138fd599445793fd730a_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:b5afd3be03bb09a2d649e1e2bb5a07119b3f596843f1be2ed3f6ee6aee7c87a2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3da387379212bfac0c0bc18c0bd48a27294cbb8f2113a65c87a3c24b23c42673_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:8340507434da15423d9405236d3574902d29e687aa4011705c7ff8fd95ce8881_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:2f07290da5319e71cc2ac01a17398d9619e88a8fd7de4b65310cdcbe4b29f312_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:cff08d56550c3d272072ff72f1bac9f1f05065e4eb9810ebf9e0c6696bc544a9_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515526"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-xml-parser. A remote attacker could exploit this by submitting a specially crafted XML document containing multiple DOCTYPE declarations. These repeated declarations can reset internal entity expansion limits during parsing. This can lead to excessive CPU usage, event-loop blocking, and memory exhaustion, ultimately resulting in a Denial of Service (DoS) for the application processing the XML.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-xml-parser: fast-xml-parser: Denial of Service via repeated DOCTYPE declarations",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability affecting Red Hat products that process untrusted XML input using the `fast-xml-parser` library versions 5.9.3 through 5.10.0. A remote attacker could provide a specially crafted XML document with multiple DOCTYPE declarations, leading to excessive CPU usage, memory exhaustion, and potential service disruption.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:6cfe1a3cb3be7857afb7c6c469d5f2ef3e6c39439896ea370fc6a7ecbb1541ff_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:e7bd712ae076820497e4f862165048d2d906de11db9baef1d3e293a3ecb5408b_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:02616be21a5fab7760e69dd3ed58dee4341442d13e5eec157d2dccee490d1bcb_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:fc437c8e16062da0690c2515171e1cd7d6f906dd827d7a3d482e3429fdf14e05_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:c283ed95e4fb75820bcfe296b6e746df7dc2f5b3cc74aabe0ab0460c31e88f2d_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:eb56e1d81af9a72f11976db564057a1be47394676e807ad583e61feaaf4207be_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:52ab72052c3dc50051c7bca50adf7306df84064ac7bbe08d9e75f96cc4b068f9_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:6143bd7238c6af113e16558f13d57fb5006a081548598438d6c40c55589110a3_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:4665c73a39ee8c778e15946f7db6d602e2d38fa108f36b82f041ca8113f4239f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:dfbbd32389ec60a7fc26f31e2e5aa8b89c6ee430d00856613ca7103c4dff3828_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:7250ec83be6cace1bd59745591df6ddc02ea35421384de804ba32bd51e7b50c1_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:d6133e30119f504c5dd33ef1c30b7764143264aca5487267594bc64f3342e583_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:4a8a09eaff889e43baa6a58b35c215c3902490e5278caa25f4dab43cdf8afea6_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:518d2bf5e0c164dd47e84935cf21904ac40a099244aaeaaa0d3f7df697d1d2c9_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:000a593acaebb6ddd6c9241ba8a77f44bf2ae3f20f07d9f59dc40cddb5312b30_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:ce31e0aed326c61ba101514eeeb39c5b9fcf0526f0c8bb70c84ec5f5e49fc270_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:50660cc42a2e7596416c8e60f5050bc06c49025052393c695bd439aa2ceb49cc_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:e063a943d8401045cf46c5f82526b18831bd020a4d8613587a9809f9ce744b21_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:6860e281fa01eedc297a0b5e043fea2b7ad3641278b31520043bb5014e751d76_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:7bcb07d008c6a4bf727509eaecf389d9168b23709c236988d92c8a2fcbbc5776_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d3a1412fd3be34d76cb420cf28ebd5faea18899837b1e2d405fcff3843d50cfd_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:54054627942e35913975fe7ae8776d5cd52bb56bc86f138fd599445793fd730a_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:b5afd3be03bb09a2d649e1e2bb5a07119b3f596843f1be2ed3f6ee6aee7c87a2_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3da387379212bfac0c0bc18c0bd48a27294cbb8f2113a65c87a3c24b23c42673_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:8340507434da15423d9405236d3574902d29e687aa4011705c7ff8fd95ce8881_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:2f07290da5319e71cc2ac01a17398d9619e88a8fd7de4b65310cdcbe4b29f312_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:cff08d56550c3d272072ff72f1bac9f1f05065e4eb9810ebf9e0c6696bc544a9_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73569"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515526",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515526"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73569",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73569"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73569",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73569"
        },
        {
          "category": "external",
          "summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/4e546e03987662de5495d050b5fba26bea65383f",
          "url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/4e546e03987662de5495d050b5fba26bea65383f"
        },
        {
          "category": "external",
          "summary": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.10.1",
          "url": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.10.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-8r6m-32jq-jx6q",
          "url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-8r6m-32jq-jx6q"
        }
      ],
      "release_date": "2026-08-13T17:45:25.045000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T00:35:13+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:6cfe1a3cb3be7857afb7c6c469d5f2ef3e6c39439896ea370fc6a7ecbb1541ff_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:e7bd712ae076820497e4f862165048d2d906de11db9baef1d3e293a3ecb5408b_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67724"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:02616be21a5fab7760e69dd3ed58dee4341442d13e5eec157d2dccee490d1bcb_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:fc437c8e16062da0690c2515171e1cd7d6f906dd827d7a3d482e3429fdf14e05_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:c283ed95e4fb75820bcfe296b6e746df7dc2f5b3cc74aabe0ab0460c31e88f2d_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:eb56e1d81af9a72f11976db564057a1be47394676e807ad583e61feaaf4207be_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:52ab72052c3dc50051c7bca50adf7306df84064ac7bbe08d9e75f96cc4b068f9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:6143bd7238c6af113e16558f13d57fb5006a081548598438d6c40c55589110a3_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:4665c73a39ee8c778e15946f7db6d602e2d38fa108f36b82f041ca8113f4239f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:dfbbd32389ec60a7fc26f31e2e5aa8b89c6ee430d00856613ca7103c4dff3828_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:7250ec83be6cace1bd59745591df6ddc02ea35421384de804ba32bd51e7b50c1_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:d6133e30119f504c5dd33ef1c30b7764143264aca5487267594bc64f3342e583_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:4a8a09eaff889e43baa6a58b35c215c3902490e5278caa25f4dab43cdf8afea6_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:518d2bf5e0c164dd47e84935cf21904ac40a099244aaeaaa0d3f7df697d1d2c9_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:000a593acaebb6ddd6c9241ba8a77f44bf2ae3f20f07d9f59dc40cddb5312b30_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:ce31e0aed326c61ba101514eeeb39c5b9fcf0526f0c8bb70c84ec5f5e49fc270_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:50660cc42a2e7596416c8e60f5050bc06c49025052393c695bd439aa2ceb49cc_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:e063a943d8401045cf46c5f82526b18831bd020a4d8613587a9809f9ce744b21_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:6860e281fa01eedc297a0b5e043fea2b7ad3641278b31520043bb5014e751d76_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:7bcb07d008c6a4bf727509eaecf389d9168b23709c236988d92c8a2fcbbc5776_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d3a1412fd3be34d76cb420cf28ebd5faea18899837b1e2d405fcff3843d50cfd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:54054627942e35913975fe7ae8776d5cd52bb56bc86f138fd599445793fd730a_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:b5afd3be03bb09a2d649e1e2bb5a07119b3f596843f1be2ed3f6ee6aee7c87a2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3da387379212bfac0c0bc18c0bd48a27294cbb8f2113a65c87a3c24b23c42673_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:8340507434da15423d9405236d3574902d29e687aa4011705c7ff8fd95ce8881_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:2f07290da5319e71cc2ac01a17398d9619e88a8fd7de4b65310cdcbe4b29f312_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:cff08d56550c3d272072ff72f1bac9f1f05065e4eb9810ebf9e0c6696bc544a9_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:6cfe1a3cb3be7857afb7c6c469d5f2ef3e6c39439896ea370fc6a7ecbb1541ff_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:e7bd712ae076820497e4f862165048d2d906de11db9baef1d3e293a3ecb5408b_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:02616be21a5fab7760e69dd3ed58dee4341442d13e5eec157d2dccee490d1bcb_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:fc437c8e16062da0690c2515171e1cd7d6f906dd827d7a3d482e3429fdf14e05_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:c283ed95e4fb75820bcfe296b6e746df7dc2f5b3cc74aabe0ab0460c31e88f2d_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:eb56e1d81af9a72f11976db564057a1be47394676e807ad583e61feaaf4207be_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:52ab72052c3dc50051c7bca50adf7306df84064ac7bbe08d9e75f96cc4b068f9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:6143bd7238c6af113e16558f13d57fb5006a081548598438d6c40c55589110a3_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:4665c73a39ee8c778e15946f7db6d602e2d38fa108f36b82f041ca8113f4239f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:dfbbd32389ec60a7fc26f31e2e5aa8b89c6ee430d00856613ca7103c4dff3828_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:7250ec83be6cace1bd59745591df6ddc02ea35421384de804ba32bd51e7b50c1_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:d6133e30119f504c5dd33ef1c30b7764143264aca5487267594bc64f3342e583_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:4a8a09eaff889e43baa6a58b35c215c3902490e5278caa25f4dab43cdf8afea6_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:518d2bf5e0c164dd47e84935cf21904ac40a099244aaeaaa0d3f7df697d1d2c9_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:000a593acaebb6ddd6c9241ba8a77f44bf2ae3f20f07d9f59dc40cddb5312b30_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:ce31e0aed326c61ba101514eeeb39c5b9fcf0526f0c8bb70c84ec5f5e49fc270_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:50660cc42a2e7596416c8e60f5050bc06c49025052393c695bd439aa2ceb49cc_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:e063a943d8401045cf46c5f82526b18831bd020a4d8613587a9809f9ce744b21_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:6860e281fa01eedc297a0b5e043fea2b7ad3641278b31520043bb5014e751d76_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:7bcb07d008c6a4bf727509eaecf389d9168b23709c236988d92c8a2fcbbc5776_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d3a1412fd3be34d76cb420cf28ebd5faea18899837b1e2d405fcff3843d50cfd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:54054627942e35913975fe7ae8776d5cd52bb56bc86f138fd599445793fd730a_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:b5afd3be03bb09a2d649e1e2bb5a07119b3f596843f1be2ed3f6ee6aee7c87a2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3da387379212bfac0c0bc18c0bd48a27294cbb8f2113a65c87a3c24b23c42673_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:8340507434da15423d9405236d3574902d29e687aa4011705c7ff8fd95ce8881_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:2f07290da5319e71cc2ac01a17398d9619e88a8fd7de4b65310cdcbe4b29f312_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:cff08d56550c3d272072ff72f1bac9f1f05065e4eb9810ebf9e0c6696bc544a9_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:6cfe1a3cb3be7857afb7c6c469d5f2ef3e6c39439896ea370fc6a7ecbb1541ff_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:e7bd712ae076820497e4f862165048d2d906de11db9baef1d3e293a3ecb5408b_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-xml-parser: fast-xml-parser: Denial of Service via repeated DOCTYPE declarations"
    },
    {
      "cve": "CVE-2026-82417",
      "cwe": {
        "id": "CWE-1287",
        "name": "Improper Validation of Specified Type of Input"
      },
      "discovery_date": "2026-08-30T00:00:50.379994+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:02616be21a5fab7760e69dd3ed58dee4341442d13e5eec157d2dccee490d1bcb_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:fc437c8e16062da0690c2515171e1cd7d6f906dd827d7a3d482e3429fdf14e05_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:c283ed95e4fb75820bcfe296b6e746df7dc2f5b3cc74aabe0ab0460c31e88f2d_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:eb56e1d81af9a72f11976db564057a1be47394676e807ad583e61feaaf4207be_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:52ab72052c3dc50051c7bca50adf7306df84064ac7bbe08d9e75f96cc4b068f9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:6143bd7238c6af113e16558f13d57fb5006a081548598438d6c40c55589110a3_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:4665c73a39ee8c778e15946f7db6d602e2d38fa108f36b82f041ca8113f4239f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:dfbbd32389ec60a7fc26f31e2e5aa8b89c6ee430d00856613ca7103c4dff3828_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:7250ec83be6cace1bd59745591df6ddc02ea35421384de804ba32bd51e7b50c1_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:d6133e30119f504c5dd33ef1c30b7764143264aca5487267594bc64f3342e583_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:4a8a09eaff889e43baa6a58b35c215c3902490e5278caa25f4dab43cdf8afea6_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:518d2bf5e0c164dd47e84935cf21904ac40a099244aaeaaa0d3f7df697d1d2c9_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:000a593acaebb6ddd6c9241ba8a77f44bf2ae3f20f07d9f59dc40cddb5312b30_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:ce31e0aed326c61ba101514eeeb39c5b9fcf0526f0c8bb70c84ec5f5e49fc270_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:50660cc42a2e7596416c8e60f5050bc06c49025052393c695bd439aa2ceb49cc_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:e063a943d8401045cf46c5f82526b18831bd020a4d8613587a9809f9ce744b21_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:6860e281fa01eedc297a0b5e043fea2b7ad3641278b31520043bb5014e751d76_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:7bcb07d008c6a4bf727509eaecf389d9168b23709c236988d92c8a2fcbbc5776_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d3a1412fd3be34d76cb420cf28ebd5faea18899837b1e2d405fcff3843d50cfd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:54054627942e35913975fe7ae8776d5cd52bb56bc86f138fd599445793fd730a_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:b5afd3be03bb09a2d649e1e2bb5a07119b3f596843f1be2ed3f6ee6aee7c87a2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3da387379212bfac0c0bc18c0bd48a27294cbb8f2113a65c87a3c24b23c42673_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:8340507434da15423d9405236d3574902d29e687aa4011705c7ff8fd95ce8881_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:2f07290da5319e71cc2ac01a17398d9619e88a8fd7de4b65310cdcbe4b29f312_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:cff08d56550c3d272072ff72f1bac9f1f05065e4eb9810ebf9e0c6696bc544a9_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2525936"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in qs. The `qs.stringify` function, responsible for serializing objects, does not properly validate the `isBuffer` property of an object\u0027s constructor before attempting to invoke it. An unauthenticated attacker can provide specially crafted input that, when processed and then serialized by `qs.stringify`, triggers a `TypeError`. This vulnerability can lead to a Denial of Service (DoS), causing affected applications to return a 500 error or, in certain scenarios, terminate the application process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "qs: qs: Denial of Service via improper validation in stringify function",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A denial of service vulnerability was found in the qs package for Node.js. The stringify function does not verify that constructor.isBuffer is callable before invoking it. An attacker who can influence object shape, for example through query parameters parsed with allowPrototypes: true as Express 4 does by default, can cause qs.stringify to throw a TypeError when that data is re-serialized. In typical Node.js HTTP frameworks the error is caught per request and returns HTTP 500. In code paths without an error boundary, such as async handlers or background jobs, the process may exit.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:6cfe1a3cb3be7857afb7c6c469d5f2ef3e6c39439896ea370fc6a7ecbb1541ff_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:e7bd712ae076820497e4f862165048d2d906de11db9baef1d3e293a3ecb5408b_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:02616be21a5fab7760e69dd3ed58dee4341442d13e5eec157d2dccee490d1bcb_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:fc437c8e16062da0690c2515171e1cd7d6f906dd827d7a3d482e3429fdf14e05_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:c283ed95e4fb75820bcfe296b6e746df7dc2f5b3cc74aabe0ab0460c31e88f2d_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:eb56e1d81af9a72f11976db564057a1be47394676e807ad583e61feaaf4207be_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:52ab72052c3dc50051c7bca50adf7306df84064ac7bbe08d9e75f96cc4b068f9_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:6143bd7238c6af113e16558f13d57fb5006a081548598438d6c40c55589110a3_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:4665c73a39ee8c778e15946f7db6d602e2d38fa108f36b82f041ca8113f4239f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:dfbbd32389ec60a7fc26f31e2e5aa8b89c6ee430d00856613ca7103c4dff3828_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:7250ec83be6cace1bd59745591df6ddc02ea35421384de804ba32bd51e7b50c1_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:d6133e30119f504c5dd33ef1c30b7764143264aca5487267594bc64f3342e583_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:4a8a09eaff889e43baa6a58b35c215c3902490e5278caa25f4dab43cdf8afea6_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:518d2bf5e0c164dd47e84935cf21904ac40a099244aaeaaa0d3f7df697d1d2c9_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:000a593acaebb6ddd6c9241ba8a77f44bf2ae3f20f07d9f59dc40cddb5312b30_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:ce31e0aed326c61ba101514eeeb39c5b9fcf0526f0c8bb70c84ec5f5e49fc270_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:50660cc42a2e7596416c8e60f5050bc06c49025052393c695bd439aa2ceb49cc_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:e063a943d8401045cf46c5f82526b18831bd020a4d8613587a9809f9ce744b21_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:6860e281fa01eedc297a0b5e043fea2b7ad3641278b31520043bb5014e751d76_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:7bcb07d008c6a4bf727509eaecf389d9168b23709c236988d92c8a2fcbbc5776_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d3a1412fd3be34d76cb420cf28ebd5faea18899837b1e2d405fcff3843d50cfd_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:54054627942e35913975fe7ae8776d5cd52bb56bc86f138fd599445793fd730a_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:b5afd3be03bb09a2d649e1e2bb5a07119b3f596843f1be2ed3f6ee6aee7c87a2_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3da387379212bfac0c0bc18c0bd48a27294cbb8f2113a65c87a3c24b23c42673_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:8340507434da15423d9405236d3574902d29e687aa4011705c7ff8fd95ce8881_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:2f07290da5319e71cc2ac01a17398d9619e88a8fd7de4b65310cdcbe4b29f312_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:cff08d56550c3d272072ff72f1bac9f1f05065e4eb9810ebf9e0c6696bc544a9_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-82417"
        },
        {
          "category": "external",
          "summary": "RHBZ#2525936",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525936"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-82417",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-82417"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-82417",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82417"
        },
        {
          "category": "external",
          "summary": "https://github.com/ljharb/qs/commit/e83d321ffafb38cf210683ac31714fce6ce1c6c6",
          "url": "https://github.com/ljharb/qs/commit/e83d321ffafb38cf210683ac31714fce6ce1c6c6"
        },
        {
          "category": "external",
          "summary": "https://github.com/ljharb/qs/security/advisories/GHSA-4mjr-xmp4-gh2g",
          "url": "https://github.com/ljharb/qs/security/advisories/GHSA-4mjr-xmp4-gh2g"
        }
      ],
      "release_date": "2026-08-29T23:51:27.634000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T00:35:13+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:6cfe1a3cb3be7857afb7c6c469d5f2ef3e6c39439896ea370fc6a7ecbb1541ff_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:e7bd712ae076820497e4f862165048d2d906de11db9baef1d3e293a3ecb5408b_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67724"
        },
        {
          "category": "workaround",
          "details": "If an immediate upgrade to qs 6.16.0 is not feasible, avoid re-serializing attacker-influenced parsed query or body objects with qs.stringify. Where qs.parse is used directly, set allowPrototypes: false unless prototype keys are required. For Express applications, review whether the default query parser configuration is necessary. Wrapping qs.stringify calls in try/catch can limit impact to individual requests.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:02616be21a5fab7760e69dd3ed58dee4341442d13e5eec157d2dccee490d1bcb_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:fc437c8e16062da0690c2515171e1cd7d6f906dd827d7a3d482e3429fdf14e05_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:c283ed95e4fb75820bcfe296b6e746df7dc2f5b3cc74aabe0ab0460c31e88f2d_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:eb56e1d81af9a72f11976db564057a1be47394676e807ad583e61feaaf4207be_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:52ab72052c3dc50051c7bca50adf7306df84064ac7bbe08d9e75f96cc4b068f9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:6143bd7238c6af113e16558f13d57fb5006a081548598438d6c40c55589110a3_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:4665c73a39ee8c778e15946f7db6d602e2d38fa108f36b82f041ca8113f4239f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:dfbbd32389ec60a7fc26f31e2e5aa8b89c6ee430d00856613ca7103c4dff3828_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:7250ec83be6cace1bd59745591df6ddc02ea35421384de804ba32bd51e7b50c1_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:d6133e30119f504c5dd33ef1c30b7764143264aca5487267594bc64f3342e583_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:4a8a09eaff889e43baa6a58b35c215c3902490e5278caa25f4dab43cdf8afea6_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:518d2bf5e0c164dd47e84935cf21904ac40a099244aaeaaa0d3f7df697d1d2c9_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:000a593acaebb6ddd6c9241ba8a77f44bf2ae3f20f07d9f59dc40cddb5312b30_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:ce31e0aed326c61ba101514eeeb39c5b9fcf0526f0c8bb70c84ec5f5e49fc270_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:50660cc42a2e7596416c8e60f5050bc06c49025052393c695bd439aa2ceb49cc_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:e063a943d8401045cf46c5f82526b18831bd020a4d8613587a9809f9ce744b21_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:6860e281fa01eedc297a0b5e043fea2b7ad3641278b31520043bb5014e751d76_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:7bcb07d008c6a4bf727509eaecf389d9168b23709c236988d92c8a2fcbbc5776_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d3a1412fd3be34d76cb420cf28ebd5faea18899837b1e2d405fcff3843d50cfd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:54054627942e35913975fe7ae8776d5cd52bb56bc86f138fd599445793fd730a_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:b5afd3be03bb09a2d649e1e2bb5a07119b3f596843f1be2ed3f6ee6aee7c87a2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3da387379212bfac0c0bc18c0bd48a27294cbb8f2113a65c87a3c24b23c42673_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:8340507434da15423d9405236d3574902d29e687aa4011705c7ff8fd95ce8881_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:2f07290da5319e71cc2ac01a17398d9619e88a8fd7de4b65310cdcbe4b29f312_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:cff08d56550c3d272072ff72f1bac9f1f05065e4eb9810ebf9e0c6696bc544a9_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:6cfe1a3cb3be7857afb7c6c469d5f2ef3e6c39439896ea370fc6a7ecbb1541ff_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:e7bd712ae076820497e4f862165048d2d906de11db9baef1d3e293a3ecb5408b_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:02616be21a5fab7760e69dd3ed58dee4341442d13e5eec157d2dccee490d1bcb_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:fc437c8e16062da0690c2515171e1cd7d6f906dd827d7a3d482e3429fdf14e05_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:c283ed95e4fb75820bcfe296b6e746df7dc2f5b3cc74aabe0ab0460c31e88f2d_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:eb56e1d81af9a72f11976db564057a1be47394676e807ad583e61feaaf4207be_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:52ab72052c3dc50051c7bca50adf7306df84064ac7bbe08d9e75f96cc4b068f9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:6143bd7238c6af113e16558f13d57fb5006a081548598438d6c40c55589110a3_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:4665c73a39ee8c778e15946f7db6d602e2d38fa108f36b82f041ca8113f4239f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:dfbbd32389ec60a7fc26f31e2e5aa8b89c6ee430d00856613ca7103c4dff3828_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:7250ec83be6cace1bd59745591df6ddc02ea35421384de804ba32bd51e7b50c1_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:d6133e30119f504c5dd33ef1c30b7764143264aca5487267594bc64f3342e583_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:4a8a09eaff889e43baa6a58b35c215c3902490e5278caa25f4dab43cdf8afea6_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:518d2bf5e0c164dd47e84935cf21904ac40a099244aaeaaa0d3f7df697d1d2c9_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:000a593acaebb6ddd6c9241ba8a77f44bf2ae3f20f07d9f59dc40cddb5312b30_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:ce31e0aed326c61ba101514eeeb39c5b9fcf0526f0c8bb70c84ec5f5e49fc270_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:50660cc42a2e7596416c8e60f5050bc06c49025052393c695bd439aa2ceb49cc_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:e063a943d8401045cf46c5f82526b18831bd020a4d8613587a9809f9ce744b21_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:6860e281fa01eedc297a0b5e043fea2b7ad3641278b31520043bb5014e751d76_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:7bcb07d008c6a4bf727509eaecf389d9168b23709c236988d92c8a2fcbbc5776_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d3a1412fd3be34d76cb420cf28ebd5faea18899837b1e2d405fcff3843d50cfd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:54054627942e35913975fe7ae8776d5cd52bb56bc86f138fd599445793fd730a_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:b5afd3be03bb09a2d649e1e2bb5a07119b3f596843f1be2ed3f6ee6aee7c87a2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3da387379212bfac0c0bc18c0bd48a27294cbb8f2113a65c87a3c24b23c42673_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:8340507434da15423d9405236d3574902d29e687aa4011705c7ff8fd95ce8881_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:2f07290da5319e71cc2ac01a17398d9619e88a8fd7de4b65310cdcbe4b29f312_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:cff08d56550c3d272072ff72f1bac9f1f05065e4eb9810ebf9e0c6696bc544a9_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:6cfe1a3cb3be7857afb7c6c469d5f2ef3e6c39439896ea370fc6a7ecbb1541ff_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:e7bd712ae076820497e4f862165048d2d906de11db9baef1d3e293a3ecb5408b_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "qs: qs: Denial of Service via improper validation in stringify function"
    },
    {
      "cve": "CVE-2026-84375",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-09-01T21:51:30.205823+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:02616be21a5fab7760e69dd3ed58dee4341442d13e5eec157d2dccee490d1bcb_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:fc437c8e16062da0690c2515171e1cd7d6f906dd827d7a3d482e3429fdf14e05_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:c283ed95e4fb75820bcfe296b6e746df7dc2f5b3cc74aabe0ab0460c31e88f2d_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:eb56e1d81af9a72f11976db564057a1be47394676e807ad583e61feaaf4207be_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:52ab72052c3dc50051c7bca50adf7306df84064ac7bbe08d9e75f96cc4b068f9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:6143bd7238c6af113e16558f13d57fb5006a081548598438d6c40c55589110a3_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:4665c73a39ee8c778e15946f7db6d602e2d38fa108f36b82f041ca8113f4239f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:dfbbd32389ec60a7fc26f31e2e5aa8b89c6ee430d00856613ca7103c4dff3828_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:7250ec83be6cace1bd59745591df6ddc02ea35421384de804ba32bd51e7b50c1_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:d6133e30119f504c5dd33ef1c30b7764143264aca5487267594bc64f3342e583_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:4a8a09eaff889e43baa6a58b35c215c3902490e5278caa25f4dab43cdf8afea6_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:518d2bf5e0c164dd47e84935cf21904ac40a099244aaeaaa0d3f7df697d1d2c9_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:000a593acaebb6ddd6c9241ba8a77f44bf2ae3f20f07d9f59dc40cddb5312b30_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:ce31e0aed326c61ba101514eeeb39c5b9fcf0526f0c8bb70c84ec5f5e49fc270_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:50660cc42a2e7596416c8e60f5050bc06c49025052393c695bd439aa2ceb49cc_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:e063a943d8401045cf46c5f82526b18831bd020a4d8613587a9809f9ce744b21_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:6860e281fa01eedc297a0b5e043fea2b7ad3641278b31520043bb5014e751d76_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:7bcb07d008c6a4bf727509eaecf389d9168b23709c236988d92c8a2fcbbc5776_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d3a1412fd3be34d76cb420cf28ebd5faea18899837b1e2d405fcff3843d50cfd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:54054627942e35913975fe7ae8776d5cd52bb56bc86f138fd599445793fd730a_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:b5afd3be03bb09a2d649e1e2bb5a07119b3f596843f1be2ed3f6ee6aee7c87a2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3da387379212bfac0c0bc18c0bd48a27294cbb8f2113a65c87a3c24b23c42673_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:8340507434da15423d9405236d3574902d29e687aa4011705c7ff8fd95ce8881_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:2f07290da5319e71cc2ac01a17398d9619e88a8fd7de4b65310cdcbe4b29f312_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:cff08d56550c3d272072ff72f1bac9f1f05065e4eb9810ebf9e0c6696bc544a9_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2527118"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in js-yaml, a JavaScript YAML parser. An attacker can exploit this by providing a specially crafted YAML document that causes the parser to perform excessive processing when handling merge keys with empty sources. This can lead to prolonged CPU consumption, effectively causing a denial of service (DoS) for applications that process untrusted YAML input.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in js-yaml, affecting applications that process untrusted YAML input. The flaw allows an attacker to craft a small YAML document that, when parsed, can lead to prolonged CPU consumption due to inefficient merge key processing, potentially exhausting system resources. This is particularly relevant where applications handle external YAML data and have merge processing enabled by default.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:6cfe1a3cb3be7857afb7c6c469d5f2ef3e6c39439896ea370fc6a7ecbb1541ff_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:e7bd712ae076820497e4f862165048d2d906de11db9baef1d3e293a3ecb5408b_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:02616be21a5fab7760e69dd3ed58dee4341442d13e5eec157d2dccee490d1bcb_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:fc437c8e16062da0690c2515171e1cd7d6f906dd827d7a3d482e3429fdf14e05_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:c283ed95e4fb75820bcfe296b6e746df7dc2f5b3cc74aabe0ab0460c31e88f2d_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:eb56e1d81af9a72f11976db564057a1be47394676e807ad583e61feaaf4207be_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:52ab72052c3dc50051c7bca50adf7306df84064ac7bbe08d9e75f96cc4b068f9_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:6143bd7238c6af113e16558f13d57fb5006a081548598438d6c40c55589110a3_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:4665c73a39ee8c778e15946f7db6d602e2d38fa108f36b82f041ca8113f4239f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:dfbbd32389ec60a7fc26f31e2e5aa8b89c6ee430d00856613ca7103c4dff3828_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:7250ec83be6cace1bd59745591df6ddc02ea35421384de804ba32bd51e7b50c1_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:d6133e30119f504c5dd33ef1c30b7764143264aca5487267594bc64f3342e583_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:4a8a09eaff889e43baa6a58b35c215c3902490e5278caa25f4dab43cdf8afea6_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:518d2bf5e0c164dd47e84935cf21904ac40a099244aaeaaa0d3f7df697d1d2c9_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:000a593acaebb6ddd6c9241ba8a77f44bf2ae3f20f07d9f59dc40cddb5312b30_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:ce31e0aed326c61ba101514eeeb39c5b9fcf0526f0c8bb70c84ec5f5e49fc270_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:50660cc42a2e7596416c8e60f5050bc06c49025052393c695bd439aa2ceb49cc_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:e063a943d8401045cf46c5f82526b18831bd020a4d8613587a9809f9ce744b21_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:6860e281fa01eedc297a0b5e043fea2b7ad3641278b31520043bb5014e751d76_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:7bcb07d008c6a4bf727509eaecf389d9168b23709c236988d92c8a2fcbbc5776_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d3a1412fd3be34d76cb420cf28ebd5faea18899837b1e2d405fcff3843d50cfd_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:54054627942e35913975fe7ae8776d5cd52bb56bc86f138fd599445793fd730a_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:b5afd3be03bb09a2d649e1e2bb5a07119b3f596843f1be2ed3f6ee6aee7c87a2_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3da387379212bfac0c0bc18c0bd48a27294cbb8f2113a65c87a3c24b23c42673_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:8340507434da15423d9405236d3574902d29e687aa4011705c7ff8fd95ce8881_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:2f07290da5319e71cc2ac01a17398d9619e88a8fd7de4b65310cdcbe4b29f312_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:cff08d56550c3d272072ff72f1bac9f1f05065e4eb9810ebf9e0c6696bc544a9_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84375"
        },
        {
          "category": "external",
          "summary": "RHBZ#2527118",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527118"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84375",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84375"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84375",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84375"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639",
          "url": "https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/6a8e05f9a485188ed730ac81e81ae221352ef480",
          "url": "https://github.com/nodeca/js-yaml/commit/6a8e05f9a485188ed730ac81e81ae221352ef480"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/d90b6612a5a84385bdcb556c44578eac76dc0f6b",
          "url": "https://github.com/nodeca/js-yaml/commit/d90b6612a5a84385bdcb556c44578eac76dc0f6b"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/pull/797",
          "url": "https://github.com/nodeca/js-yaml/pull/797"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.2",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.2",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-2883-xcg3-v3hh",
          "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-2883-xcg3-v3hh"
        }
      ],
      "release_date": "2026-09-01T21:43:13.617000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T00:35:13+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:6cfe1a3cb3be7857afb7c6c469d5f2ef3e6c39439896ea370fc6a7ecbb1541ff_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:e7bd712ae076820497e4f862165048d2d906de11db9baef1d3e293a3ecb5408b_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67724"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:02616be21a5fab7760e69dd3ed58dee4341442d13e5eec157d2dccee490d1bcb_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:fc437c8e16062da0690c2515171e1cd7d6f906dd827d7a3d482e3429fdf14e05_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:c283ed95e4fb75820bcfe296b6e746df7dc2f5b3cc74aabe0ab0460c31e88f2d_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:eb56e1d81af9a72f11976db564057a1be47394676e807ad583e61feaaf4207be_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:52ab72052c3dc50051c7bca50adf7306df84064ac7bbe08d9e75f96cc4b068f9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:6143bd7238c6af113e16558f13d57fb5006a081548598438d6c40c55589110a3_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:4665c73a39ee8c778e15946f7db6d602e2d38fa108f36b82f041ca8113f4239f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:dfbbd32389ec60a7fc26f31e2e5aa8b89c6ee430d00856613ca7103c4dff3828_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:7250ec83be6cace1bd59745591df6ddc02ea35421384de804ba32bd51e7b50c1_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:d6133e30119f504c5dd33ef1c30b7764143264aca5487267594bc64f3342e583_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:4a8a09eaff889e43baa6a58b35c215c3902490e5278caa25f4dab43cdf8afea6_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:518d2bf5e0c164dd47e84935cf21904ac40a099244aaeaaa0d3f7df697d1d2c9_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:000a593acaebb6ddd6c9241ba8a77f44bf2ae3f20f07d9f59dc40cddb5312b30_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:ce31e0aed326c61ba101514eeeb39c5b9fcf0526f0c8bb70c84ec5f5e49fc270_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:50660cc42a2e7596416c8e60f5050bc06c49025052393c695bd439aa2ceb49cc_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:e063a943d8401045cf46c5f82526b18831bd020a4d8613587a9809f9ce744b21_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:6860e281fa01eedc297a0b5e043fea2b7ad3641278b31520043bb5014e751d76_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:7bcb07d008c6a4bf727509eaecf389d9168b23709c236988d92c8a2fcbbc5776_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d3a1412fd3be34d76cb420cf28ebd5faea18899837b1e2d405fcff3843d50cfd_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:54054627942e35913975fe7ae8776d5cd52bb56bc86f138fd599445793fd730a_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:b5afd3be03bb09a2d649e1e2bb5a07119b3f596843f1be2ed3f6ee6aee7c87a2_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3da387379212bfac0c0bc18c0bd48a27294cbb8f2113a65c87a3c24b23c42673_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:8340507434da15423d9405236d3574902d29e687aa4011705c7ff8fd95ce8881_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:2f07290da5319e71cc2ac01a17398d9619e88a8fd7de4b65310cdcbe4b29f312_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:cff08d56550c3d272072ff72f1bac9f1f05065e4eb9810ebf9e0c6696bc544a9_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:6cfe1a3cb3be7857afb7c6c469d5f2ef3e6c39439896ea370fc6a7ecbb1541ff_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:e7bd712ae076820497e4f862165048d2d906de11db9baef1d3e293a3ecb5408b_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.