RHSA-2026:68006

Vulnerability from csaf_redhat - Published: 2026-09-16 12:20 - Updated: 2026-09-22 22:26
Summary
Red Hat Security Advisory: Red Hat Edge Manager Version 1.2.1 Security Update
Severity
Important
Notes
Topic: Red Hat Edge Manager Version 1.2.1 Security Update
Details: Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused management of edge devices and applications. It supports image-mode RHEL and container workloads that run on Podman/Docker or Kubernetes. RHEM is now available as a standalone feature, providing greater flexibility for edge deployments. In addition to the standalone version, RHEM continues to be offered as a plugin for the following platforms: * Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge devices. * Red Hat Ansible Automation Platform (AAP): Integrates edge management with Ansible automation. This integration enables organizations to optimize the management and orchestration of their fleets of edge devices; whether its thousands of dispersed retail point-of-sale systems or industrial machinery on remote factory floors. Value for customers and partners: * This solution not only helps customers manage thousands of devices but helps scale operations. * To manage large-scale deployments, customers need to be able to integrate with their existing management systems, support remote configuration and over-the-air updates, and collect telemetry data for advanced analytics. * Red Hat Edge Manager offers a simple and security-focused lifecycle management, from onboarding to decommissioning of edge devices. This complete end-to-end solution empowers organizations to gain the most value from the fleets of devices that generate data, all from a centralized location.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-6377

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Next4Biz Information Technologies Inc. CSM (Customer Service Management) allows Path Traversal. This issue affects CSM (Customer Service Management): from 6.8.9 before 8.0.3.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64 —
Threats
Impact Important
CVE-2026-13149

A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1333 - Inefficient Regular Expression Complexity
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64 —
Workaround
Threats
Impact Important
CVE-2026-13676

A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-551 - Incorrect Behavior Order: Authorization Before Parsing and Canonicalization
Affected products
Fixed 4 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-17106

A flaw was found in moby/go-archive. The tar extraction routines in the component do not properly restrict filesystem operations to the intended destination directory. An attacker who controls the contents of an archive can exploit this by including symbolic links, allowing them to create or overwrite files at arbitrary locations on the system where the archive is being extracted. This could lead to unauthorized modification of system files or potentially arbitrary code execution.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Affected products
Fixed 24 products, the same list as for CVE-2026-6377
Known not affected 4 products, the same list as for CVE-2026-6377
Threats
Impact Important
CVE-2026-27145

A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-606 - Unchecked Input for Loop Condition
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64 —
Workaround
Threats
Impact Important
CVE-2026-33818

A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Affected products
Fixed 2 products, the same list as for CVE-2026-27145
Known not affected 26 products, the same list as for CVE-2026-27145
Threats
Impact Important
CVE-2026-41178

A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 24 products, the same list as for CVE-2026-6377
Known not affected 4 products, the same list as for CVE-2026-6377
Threats
Impact Important
CVE-2026-44740

A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-606 - Unchecked Input for Loop Condition
Affected products
Fixed 24 products, the same list as for CVE-2026-6377
Known not affected 4 products, the same list as for CVE-2026-6377
Threats
Impact Important
CVE-2026-45819

A flaw was found in baseline-browser-mapping. This vulnerability allows an attacker to cause a denial of service by providing invalid or conflicting input parameters. The affected component improperly terminates the process instead of handling the input error gracefully, leading to immediate service disruption.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-617 - Reachable Assertion
Affected products
Fixed 4 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-48050

A flaw was found in Arc. This vulnerability allows a remote unauthenticated attacker to access Go debug pprof endpoints due to improper authentication bypass. Successful exploitation can lead to the disclosure of sensitive runtime state information and enable a CPU-burn Denial of Service (DoS) attack, impacting the availability and confidentiality of the system.

8.2 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64 —
Vendor Fix fix
Workaround
Threats
Impact Important
CVE-2026-50162

A flaw was found in oras-go. The file content store, intended to confine writes to a specified working directory, does not properly account for symbolic link (symlink) traversal. A remote attacker, by providing a specially crafted blob title, could exploit this vulnerability to create files outside the intended working directory. This filesystem boundary bypass allows for arbitrary file creation, potentially leading to unauthorized data modification or system compromise depending on the runtime environment.

5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products
Fixed 24 products, the same list as for CVE-2026-6377
Known not affected 4 products, the same list as for CVE-2026-6377
Threats
Impact Moderate
CVE-2026-56853

A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 2 products, the same list as for CVE-2026-27145
Known not affected 26 products, the same list as for CVE-2026-27145
Threats
Impact Important
CVE-2026-56858

A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64 —
Unresolved product id: Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64 —
Threats
Impact Important
CVE-2026-56859

A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Affected products
Fixed 2 products, the same list as for CVE-2026-56858
Known not affected 26 products, the same list as for CVE-2026-56858
Threats
Impact Important
CVE-2026-56860

A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory ('..') segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 2 products, the same list as for CVE-2026-27145
Known not affected 26 products, the same list as for CVE-2026-27145
Threats
Impact Important
CVE-2026-56862

A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1050 - Excessive Platform Resource Consumption within a Loop
Affected products
Fixed 2 products, the same list as for CVE-2026-27145
Known not affected 26 products, the same list as for CVE-2026-27145
Threats
Impact Important
CVE-2026-59869

A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-606 - Unchecked Input for Loop Condition
Affected products
Fixed 4 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-69152

A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 4 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-71556

A flaw was found in go-git, an extensible Git implementation library. Worktree operations, such as checkout, status, and add, resolve symbolic links within the working tree without proper boundary confinement. This allows a remote attacker to craft a malicious repository containing a symlink, which, when cloned and its worktree operations are used, can lead to reading from or writing to arbitrary files outside the intended working directory. This could result in information disclosure or arbitrary file modification.

7.1 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L
CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Affected products
Fixed 24 products, the same list as for CVE-2026-6377
Known not affected 4 products, the same list as for CVE-2026-6377
Threats
Impact Important
CVE-2026-73089

A flaw was found in Browserslist, a configuration tool for front-end development. An attacker can exploit this vulnerability by influencing repeated query values, leading to unbounded memory growth. This issue can cause the application to consume excessive memory, resulting in an out-of-memory process crash and a Denial of Service (DoS) for affected systems.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 4 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-73643

A flaw was found in js-yaml, a JavaScript YAML parser. A remote attacker could exploit this vulnerability by providing specially crafted YAML input containing nested flow collections. This can lead to exponential parsing time when the application processes untrusted input, consuming excessive CPU resources. This resource exhaustion can block the Node.js event loop and cause a Denial of Service (DoS) for the affected process.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1333 - Inefficient Regular Expression Complexity
Affected products
Fixed 4 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-75899

A flaw was found in fast-uri, a URI parser for Node.js. The component incorrectly decodes percent escapes in a hostname twice during URI parsing and authority recomposition. This double decoding can allow a remote attacker to manipulate a URI to point to a different network destination, such as a loopback address. This vulnerability can lead to Server-Side Request Forgery (SSRF) and bypass host-based security policies.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-140 - Improper Neutralization of Delimiters
Affected products
Fixed 4 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-75931

A flaw was found in fast-uri, a URI parser for Node.js. This vulnerability arises because the parser fails to consistently convert internationalized domain names (IDN) to their standard ASCII form when processing scheme-relative references. This inconsistency can lead to host confusion, where an application might validate a URI against a security policy using one hostname, but then resolve to a different, potentially malicious, hostname. This discrepancy could allow an attacker to bypass security policies and access unauthorized resources.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
Affected products
Fixed 4 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-75975

A flaw was found in fast-uri, a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not fully validate the IPv6 grammar, allowing invalid trailing text in an authority to be silently discarded. This can lead to a malformed, attacker-controlled host being normalized into a different, valid IPv6 destination, such as a local or private IPv6 target. An application normalizing untrusted URLs before outbound requests, redirects, or proxy routing could be redirected, resulting in a server-side request forgery (SSRF) and address-policy bypass.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-918 - Server-Side Request Forgery (SSRF)
Affected products
Fixed 4 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-76172

A flaw was found in fast-uri, a software component used for parsing Uniform Resource Identifiers (URIs) in Node.js applications. This vulnerability arises from an issue in how fast-uri processes the scheme part of a URI, specifically when it contains special characters that are percent-encoded. An attacker can exploit this by crafting a malicious URI, causing the parser to misinterpret the host, which can lead to serious security risks. These risks include unauthorized redirection to external websites, server-side request forgery (SSRF) where the application makes unintended requests to internal or external resources, and bypassing security policies.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-76 - Improper Neutralization of Equivalent Special Elements
Affected products
Fixed 4 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-81521

A flaw was found in the MongoDB Go Driver. The `Client.BulkWrite` operation does not properly validate database names, allowing a specially crafted name with reserved characters to redirect write operations. This vulnerability could enable an attacker to modify or corrupt data in unintended databases and collections.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-791 - Incomplete Filtering of Special Elements
Affected products
Fixed 24 products, the same list as for CVE-2026-6377
Known not affected 4 products, the same list as for CVE-2026-6377
Threats
Impact Important
CVE-2026-84292

A flaw was found in fast-uri. This component improperly serializes the port component of a Uniform Resource Identifier (URI) without validating its content. A remote attacker can exploit this by crafting a malicious port value that injects authority delimiters. This manipulation can demote the intended host to user information and redirect the authority to an attacker-controlled host, leading to information disclosure as applications interpret the attacker's host as legitimate.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-140 - Improper Neutralization of Delimiters
Affected products
Fixed 4 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-84375

A flaw was found in js-yaml, a JavaScript YAML parser. An attacker can exploit this by providing a specially crafted YAML document that causes the parser to perform excessive processing when handling merge keys with empty sources. This can lead to prolonged CPU consumption, effectively causing a denial of service (DoS) for applications that process untrusted YAML input.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
Affected products
Fixed 4 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Moderate
CVE-2026-84394

A flaw was found in fast-uri. The library incorrectly processes Uniform Resource Identifier (URI) hosts containing unbalanced brackets, leading to a discrepancy in how the host is parsed by fast-uri compared to other HTTP clients. This host confusion can allow an attacker to bypass security policies, such as Server-Side Request Forgery (SSRF) denylists or redirect allowlists, by causing an application to evaluate its policy against an incorrect host string. This could result in unintended network requests or access to unauthorized resources.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-1289 - Improper Validation of Unsafe Equivalence in Input
Affected products
Fixed 4 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:68006 self
https://access.redhat.com/security/cve/CVE-2026-13149 external
https://access.redhat.com/security/cve/CVE-2026-13676 external
https://access.redhat.com/security/cve/CVE-2026-17106 external
https://access.redhat.com/security/cve/CVE-2026-27145 external
https://access.redhat.com/security/cve/CVE-2026-33818 external
https://access.redhat.com/security/cve/CVE-2026-41178 external
https://access.redhat.com/security/cve/CVE-2026-44740 external
https://access.redhat.com/security/cve/CVE-2026-45819 external
https://access.redhat.com/security/cve/CVE-2026-48050 external
https://access.redhat.com/security/cve/CVE-2026-50162 external
https://access.redhat.com/security/cve/CVE-2026-56853 external
https://access.redhat.com/security/cve/CVE-2026-56858 external
https://access.redhat.com/security/cve/CVE-2026-56859 external
https://access.redhat.com/security/cve/CVE-2026-56860 external
https://access.redhat.com/security/cve/CVE-2026-56862 external
https://access.redhat.com/security/cve/CVE-2026-59869 external
https://access.redhat.com/security/cve/CVE-2026-6377 external
https://access.redhat.com/security/cve/CVE-2026-69152 external
https://access.redhat.com/security/cve/CVE-2026-71556 external
https://access.redhat.com/security/cve/CVE-2026-73089 external
https://access.redhat.com/security/cve/CVE-2026-73643 external
https://access.redhat.com/security/cve/CVE-2026-75899 external
https://access.redhat.com/security/cve/CVE-2026-75931 external
https://access.redhat.com/security/cve/CVE-2026-75975 external
https://access.redhat.com/security/cve/CVE-2026-76172 external
https://access.redhat.com/security/cve/CVE-2026-81521 external
https://access.redhat.com/security/cve/CVE-2026-84292 external
https://access.redhat.com/security/cve/CVE-2026-84375 external
https://access.redhat.com/security/cve/CVE-2026-84394 external
https://access.redhat.com/security/updates/classi… external
https://docs.redhat.com/en/documentation/red_hat_… external
https://docs.redhat.com/en/documentation/red_hat_… external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-6377 self
https://www.cve.org/CVERecord?id=CVE-2026-6377 external
https://access.redhat.com/security/cve/CVE-2026-13149 self
https://bugzilla.redhat.com/show_bug.cgi?id=2494813 external
https://www.cve.org/CVERecord?id=CVE-2026-13149 external
https://nvd.nist.gov/vuln/detail/CVE-2026-13149 external
https://github.com/juliangruber/brace-expansion/c… external
https://www.npmjs.com/package/brace-expansion external
https://access.redhat.com/security/cve/CVE-2026-13676 self
https://bugzilla.redhat.com/show_bug.cgi?id=2494197 external
https://www.cve.org/CVERecord?id=CVE-2026-13676 external
https://nvd.nist.gov/vuln/detail/CVE-2026-13676 external
https://cna.openjsf.org/security-advisories.html external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-17106 self
https://bugzilla.redhat.com/show_bug.cgi?id=2518147 external
https://www.cve.org/CVERecord?id=CVE-2026-17106 external
https://nvd.nist.gov/vuln/detail/CVE-2026-17106 external
https://docs.docker.com/desktop/release-notes/#4860 external
https://docs.docker.com/engine/release-notes/29/#2970 external
https://github.com/docker/cli/releases/tag/v29.7.0 external
https://github.com/docker/compose/releases/tag/v5.4.0 external
https://github.com/docker/sbx-releases/releases/t… external
https://github.com/moby/go-archive/releases/tag/v0.3.0 external
https://github.com/moby/go-archive/security/advis… external
https://access.redhat.com/security/cve/CVE-2026-27145 self
https://bugzilla.redhat.com/show_bug.cgi?id=2484207 external
https://www.cve.org/CVERecord?id=CVE-2026-27145 external
https://nvd.nist.gov/vuln/detail/CVE-2026-27145 external
https://go.dev/cl/783621 external
https://go.dev/issue/79694 external
https://groups.google.com/g/golang-announce/c/tKs… external
https://pkg.go.dev/vuln/GO-2026-5037 external
https://access.redhat.com/security/cve/CVE-2026-33818 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515815 external
https://www.cve.org/CVERecord?id=CVE-2026-33818 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33818 external
https://go.dev/cl/814980 external
https://go.dev/issue/80405 external
https://groups.google.com/g/golang-announce/c/94p… external
https://pkg.go.dev/vuln/GO-2026-5972 external
https://access.redhat.com/security/cve/CVE-2026-41178 self
https://bugzilla.redhat.com/show_bug.cgi?id=2484830 external
https://www.cve.org/CVERecord?id=CVE-2026-41178 external
https://nvd.nist.gov/vuln/detail/CVE-2026-41178 external
https://github.com/open-telemetry/opentelemetry-g… external
https://github.com/open-telemetry/opentelemetry-g… external
https://access.redhat.com/security/cve/CVE-2026-44740 self
https://bugzilla.redhat.com/show_bug.cgi?id=2483894 external
https://www.cve.org/CVERecord?id=CVE-2026-44740 external
https://nvd.nist.gov/vuln/detail/CVE-2026-44740 external
https://github.com/go-git/go-billy/releases/tag/v5.9.0 external
https://github.com/go-git/go-billy/releases/tag/v… external
https://github.com/go-git/go-billy/security/advis… external
https://access.redhat.com/security/cve/CVE-2026-45819 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515240 external
https://www.cve.org/CVERecord?id=CVE-2026-45819 external
https://nvd.nist.gov/vuln/detail/CVE-2026-45819 external
https://github.com/web-platform-dx/baseline-brows… external
https://github.com/web-platform-dx/baseline-brows… external
https://www.npmjs.com/package/baseline-browser-mapping external
https://access.redhat.com/security/cve/CVE-2026-48050 self
https://www.cve.org/CVERecord?id=CVE-2026-48050 external
https://access.redhat.com/security/cve/CVE-2026-50162 self
https://bugzilla.redhat.com/show_bug.cgi?id=2499694 external
https://www.cve.org/CVERecord?id=CVE-2026-50162 external
https://nvd.nist.gov/vuln/detail/CVE-2026-50162 external
https://github.com/oras-project/oras-go/security/… external
https://access.redhat.com/security/cve/CVE-2026-56853 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515827 external
https://www.cve.org/CVERecord?id=CVE-2026-56853 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56853 external
https://go.dev/cl/795540 external
https://go.dev/issue/80205 external
https://pkg.go.dev/vuln/GO-2026-6089 external
https://access.redhat.com/security/cve/CVE-2026-56858 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515838 external
https://www.cve.org/CVERecord?id=CVE-2026-56858 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56858 external
https://go.dev/cl/807100 external
https://go.dev/issue/80435 external
https://pkg.go.dev/vuln/GO-2026-6091 external
https://access.redhat.com/security/cve/CVE-2026-56859 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515840 external
https://www.cve.org/CVERecord?id=CVE-2026-56859 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56859 external
https://go.dev/cl/803320 external
https://go.dev/issue/80481 external
https://pkg.go.dev/vuln/GO-2026-6088 external
https://access.redhat.com/security/cve/CVE-2026-56860 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515820 external
https://www.cve.org/CVERecord?id=CVE-2026-56860 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56860 external
https://go.dev/cl/803681 external
https://go.dev/issue/80494 external
https://pkg.go.dev/vuln/GO-2026-6218 external
https://access.redhat.com/security/cve/CVE-2026-56862 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515839 external
https://www.cve.org/CVERecord?id=CVE-2026-56862 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56862 external
https://go.dev/cl/804261 external
https://go.dev/issue/80528 external
https://pkg.go.dev/vuln/GO-2026-6090 external
https://access.redhat.com/security/cve/CVE-2026-59869 self
https://bugzilla.redhat.com/show_bug.cgi?id=2498122 external
https://www.cve.org/CVERecord?id=CVE-2026-59869 external
https://nvd.nist.gov/vuln/detail/CVE-2026-59869 external
https://github.com/nodeca/js-yaml/commit/24f13e79… external
https://github.com/nodeca/js-yaml/commit/59423c6f… external
https://github.com/nodeca/js-yaml/releases/tag/3.15.0 external
https://github.com/nodeca/js-yaml/releases/tag/4.3.0 external
https://github.com/nodeca/js-yaml/security/adviso… external
https://access.redhat.com/security/cve/CVE-2026-69152 self
https://bugzilla.redhat.com/show_bug.cgi?id=2510722 external
https://www.cve.org/CVERecord?id=CVE-2026-69152 external
https://nvd.nist.gov/vuln/detail/CVE-2026-69152 external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/s… external
https://access.redhat.com/security/cve/CVE-2026-71556 self
https://bugzilla.redhat.com/show_bug.cgi?id=2512562 external
https://www.cve.org/CVERecord?id=CVE-2026-71556 external
https://nvd.nist.gov/vuln/detail/CVE-2026-71556 external
https://github.com/go-git/go-git/commit/008a78f2d… external
https://github.com/go-git/go-git/commit/661d1c7f1… external
https://github.com/go-git/go-git/releases/tag/v5.19.2 external
https://github.com/go-git/go-git/releases/tag/v6.… external
https://github.com/go-git/go-git/security/advisor… external
https://access.redhat.com/security/cve/CVE-2026-73089 self
https://bugzilla.redhat.com/show_bug.cgi?id=2514195 external
https://www.cve.org/CVERecord?id=CVE-2026-73089 external
https://nvd.nist.gov/vuln/detail/CVE-2026-73089 external
https://github.com/browserslist/browserslist/comm… external
https://github.com/browserslist/browserslist/rele… external
https://github.com/browserslist/browserslist/secu… external
https://access.redhat.com/security/cve/CVE-2026-73643 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515531 external
https://www.cve.org/CVERecord?id=CVE-2026-73643 external
https://nvd.nist.gov/vuln/detail/CVE-2026-73643 external
https://github.com/nodeca/js-yaml/commit/3e5240f9… external
https://github.com/nodeca/js-yaml/security/adviso… external
https://access.redhat.com/security/cve/CVE-2026-75899 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521778 external
https://www.cve.org/CVERecord?id=CVE-2026-75899 external
https://nvd.nist.gov/vuln/detail/CVE-2026-75899 external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-75931 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521777 external
https://www.cve.org/CVERecord?id=CVE-2026-75931 external
https://nvd.nist.gov/vuln/detail/CVE-2026-75931 external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-75975 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521779 external
https://www.cve.org/CVERecord?id=CVE-2026-75975 external
https://nvd.nist.gov/vuln/detail/CVE-2026-75975 external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-76172 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521798 external
https://www.cve.org/CVERecord?id=CVE-2026-76172 external
https://nvd.nist.gov/vuln/detail/CVE-2026-76172 external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-81521 self
https://bugzilla.redhat.com/show_bug.cgi?id=2525215 external
https://www.cve.org/CVERecord?id=CVE-2026-81521 external
https://nvd.nist.gov/vuln/detail/CVE-2026-81521 external
https://pkg.go.dev/go.mongodb.org/mongo-driver/v2… external
https://access.redhat.com/security/cve/CVE-2026-84292 self
https://bugzilla.redhat.com/show_bug.cgi?id=2527747 external
https://www.cve.org/CVERecord?id=CVE-2026-84292 external
https://nvd.nist.gov/vuln/detail/CVE-2026-84292 external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-84375 self
https://bugzilla.redhat.com/show_bug.cgi?id=2527118 external
https://www.cve.org/CVERecord?id=CVE-2026-84375 external
https://nvd.nist.gov/vuln/detail/CVE-2026-84375 external
https://github.com/nodeca/js-yaml/commit/3485bc06… external
https://github.com/nodeca/js-yaml/commit/6a8e05f9… external
https://github.com/nodeca/js-yaml/commit/d90b6612… external
https://github.com/nodeca/js-yaml/pull/797 external
https://github.com/nodeca/js-yaml/releases/tag/3.15.2 external
https://github.com/nodeca/js-yaml/releases/tag/4.3.2 external
https://github.com/nodeca/js-yaml/security/adviso… external
https://access.redhat.com/security/cve/CVE-2026-84394 self
https://bugzilla.redhat.com/show_bug.cgi?id=2527756 external
https://www.cve.org/CVERecord?id=CVE-2026-84394 external
https://nvd.nist.gov/vuln/detail/CVE-2026-84394 external
https://github.com/fastify/fast-uri/security/advi… external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Edge Manager Version 1.2.1 Security Update",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused\nmanagement of edge devices and applications. It supports image-mode RHEL and\ncontainer workloads that run on Podman/Docker or Kubernetes.\n\nRHEM is now available as a standalone feature, providing greater flexibility for\nedge deployments. In addition to the standalone version, RHEM continues to be\noffered as a plugin for the following platforms:\n\n* Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge\ndevices.\n* Red Hat Ansible Automation Platform (AAP): Integrates edge management with\nAnsible automation.\n\nThis integration enables organizations to optimize the management and\norchestration of their fleets of edge devices; whether its thousands of\ndispersed retail point-of-sale systems or industrial machinery on remote factory\nfloors.\n\nValue for customers and partners:\n\n* This solution not only helps customers manage thousands of devices but helps\nscale operations.\n* To manage large-scale deployments, customers need to be able to integrate with\ntheir existing management systems, support remote configuration and over-the-air\nupdates, and collect telemetry data for advanced analytics.\n* Red Hat Edge Manager offers a simple and security-focused lifecycle\nmanagement, from onboarding to decommissioning of edge devices.\n\nThis complete end-to-end solution empowers organizations to gain the most value\nfrom the fleets of devices that generate data, all from a centralized location.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:68006",
        "url": "https://access.redhat.com/errata/RHSA-2026:68006"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-13149",
        "url": "https://access.redhat.com/security/cve/CVE-2026-13149"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-13676",
        "url": "https://access.redhat.com/security/cve/CVE-2026-13676"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-17106",
        "url": "https://access.redhat.com/security/cve/CVE-2026-17106"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
        "url": "https://access.redhat.com/security/cve/CVE-2026-27145"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33818",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41178",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41178"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-44740",
        "url": "https://access.redhat.com/security/cve/CVE-2026-44740"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-45819",
        "url": "https://access.redhat.com/security/cve/CVE-2026-45819"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-48050",
        "url": "https://access.redhat.com/security/cve/CVE-2026-48050"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-50162",
        "url": "https://access.redhat.com/security/cve/CVE-2026-50162"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56853",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56853"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56858",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56858"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56859",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56859"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56860",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56860"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56862",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56862"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59869",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59869"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-6377",
        "url": "https://access.redhat.com/security/cve/CVE-2026-6377"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-69152",
        "url": "https://access.redhat.com/security/cve/CVE-2026-69152"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-71556",
        "url": "https://access.redhat.com/security/cve/CVE-2026-71556"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-73089",
        "url": "https://access.redhat.com/security/cve/CVE-2026-73089"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-73643",
        "url": "https://access.redhat.com/security/cve/CVE-2026-73643"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-75899",
        "url": "https://access.redhat.com/security/cve/CVE-2026-75899"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-75931",
        "url": "https://access.redhat.com/security/cve/CVE-2026-75931"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-75975",
        "url": "https://access.redhat.com/security/cve/CVE-2026-75975"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-76172",
        "url": "https://access.redhat.com/security/cve/CVE-2026-76172"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-81521",
        "url": "https://access.redhat.com/security/cve/CVE-2026-81521"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-84292",
        "url": "https://access.redhat.com/security/cve/CVE-2026-84292"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-84375",
        "url": "https://access.redhat.com/security/cve/CVE-2026-84375"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-84394",
        "url": "https://access.redhat.com/security/cve/CVE-2026-84394"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro",
        "url": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro",
        "url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68006.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Edge Manager Version 1.2.1 Security Update",
    "tracking": {
      "current_release_date": "2026-09-22T22:26:59+00:00",
      "generator": {
        "date": "2026-09-22T22:26:59+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.0"
        }
      },
      "id": "RHSA-2026:68006",
      "initial_release_date": "2026-09-16T12:20:25+00:00",
      "revision_history": [
        {
          "date": "2026-09-16T12:20:25+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-16T12:20:46+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-22T22:26:59+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Edge Manager 1.2",
                "product": {
                  "name": "Red Hat Edge Manager 1.2",
                  "product_id": "Red Hat Edge Manager 1.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:edge_manager:1.2::el10"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Edge Manager"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-alert-exporter-rhel10@sha256%3Ace8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-alert-exporter-rhel10\u0026tag=1789485358"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-alertmanager-proxy-rhel10@sha256%3A43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10\u0026tag=1789485956"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-api-rhel10@sha256%3Ad1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-api-rhel10\u0026tag=1789485653"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-cli-artifacts-rhel10@sha256%3A06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10\u0026tag=1789486382"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-db-setup-rhel10@sha256%3Af82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-db-setup-rhel10\u0026tag=1789487147"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-imagebuilder-api-rhel10@sha256%3A8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10\u0026tag=1789485823"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-imagebuilder-worker-rhel10@sha256%3A3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10\u0026tag=1789485526"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-pam-issuer-rhel10@sha256%3Abb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-pam-issuer-rhel10\u0026tag=1789487060"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-periodic-rhel10@sha256%3A14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-periodic-rhel10\u0026tag=1789486651"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-telemetry-gateway-rhel10@sha256%3A6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10\u0026tag=1789486468"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-ui-ocp-rhel10@sha256%3A238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-ocp-rhel10\u0026tag=1789485920"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-ui-rhel10@sha256%3A8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-rhel10\u0026tag=1789488111"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-userinfo-proxy-rhel10@sha256%3A31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10\u0026tag=1789486659"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-worker-rhel10@sha256%3Ae0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-worker-rhel10\u0026tag=1789486740"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-alert-exporter-rhel10@sha256%3Ac07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-alert-exporter-rhel10\u0026tag=1789485358"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-alertmanager-proxy-rhel10@sha256%3A524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10\u0026tag=1789485956"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-api-rhel10@sha256%3Adcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-api-rhel10\u0026tag=1789485653"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-cli-artifacts-rhel10@sha256%3A23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10\u0026tag=1789486382"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-db-setup-rhel10@sha256%3A75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-db-setup-rhel10\u0026tag=1789487147"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-imagebuilder-api-rhel10@sha256%3A415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10\u0026tag=1789485823"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-imagebuilder-worker-rhel10@sha256%3Aa77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10\u0026tag=1789485526"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-pam-issuer-rhel10@sha256%3A0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-pam-issuer-rhel10\u0026tag=1789487060"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-periodic-rhel10@sha256%3A6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-periodic-rhel10\u0026tag=1789486651"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-telemetry-gateway-rhel10@sha256%3A6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10\u0026tag=1789486468"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-ui-ocp-rhel10@sha256%3A60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-ocp-rhel10\u0026tag=1789485920"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-ui-rhel10@sha256%3Aeb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-rhel10\u0026tag=1789488111"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-userinfo-proxy-rhel10@sha256%3Af83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10\u0026tag=1789486659"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-worker-rhel10@sha256%3Ac768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-worker-rhel10\u0026tag=1789486740"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64 as a component of Red Hat Edge Manager 1.2",
          "product_id": "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-6377",
      "discovery_date": "2026-09-07T14:32:25.132288+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
          ]
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027) vulnerability in Next4Biz Information Technologies Inc. CSM (Customer Service Management) allows Path Traversal.\n\nThis issue affects CSM (Customer Service Management): from 6.8.9 before 8.0.3.",
          "title": "Vulnerability description"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-6377"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-6377",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-6377"
        }
      ],
      "release_date": "2026-09-07T14:15:48.553000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "CSM: Next4Biz CSM: Information disclosure via path traversal vulnerability"
    },
    {
      "cve": "CVE-2026-13149",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "discovery_date": "2026-06-30T10:00:59.843854+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2494813"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in brace-expansion, a widely-used npm package for expanding brace sequences. The expand() function exhibits exponential-time complexity when processing consecutive non-expanding brace groups. An attacker who can supply crafted input to expand(), directly or transitively via minimatch or glob, can cause significant CPU consumption and event-loop blocking, resulting in denial of service. The max option does not mitigate this issue, as it bounds the output size rather than the recursion work.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-13149"
        },
        {
          "category": "external",
          "summary": "RHBZ#2494813",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494813"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-13149",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-13149"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754",
          "url": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754"
        },
        {
          "category": "external",
          "summary": "https://www.npmjs.com/package/brace-expansion",
          "url": "https://www.npmjs.com/package/brace-expansion"
        }
      ],
      "release_date": "2026-06-30T08:30:34.502000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        },
        {
          "category": "workaround",
          "details": "There is no practical mitigation for this vulnerability. The brace-expansion package is typically a transitive dependency pulled in via minimatch and glob, making it difficult to isolate. Users should upgrade to a fixed version of brace-expansion when one becomes available.",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity"
    },
    {
      "cve": "CVE-2026-13676",
      "cwe": {
        "id": "CWE-551",
        "name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
      },
      "discovery_date": "2026-06-29T14:01:55.592330+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2494197"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important flaw in `fast-uri` allows a remote attacker to bypass host-based security policies. Applications that rely on `fast-uri` for URL parsing and policy enforcement, such as denylists or redirect validations, can be circumvented due to inconsistent handling of Unicode hostnames. This discrepancy between `fast-uri` and other URL parsers could lead to unauthorized resource access or malicious redirects in affected Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-13676"
        },
        {
          "category": "external",
          "summary": "RHBZ#2494197",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494197"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-13676",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6"
        }
      ],
      "release_date": "2026-06-29T13:22:44.674000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization"
    },
    {
      "cve": "CVE-2026-17106",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "discovery_date": "2026-08-18T18:51:06.836464+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2518147"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in moby/go-archive. The tar extraction routines in the component do not properly restrict filesystem operations to the intended destination directory. An attacker who controls the contents of an archive can exploit this by including symbolic links, allowing them to create or overwrite files at arbitrary locations on the system where the archive is being extracted. This could lead to unauthorized modification of system files or potentially arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/moby/go-archive: moby/go-archive: Arbitrary file write via link following in tar extraction",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important severity vulnerability in `moby/go-archive` allows for arbitrary file writes during tar extraction. An attacker providing a specially crafted tar archive can exploit symlink following to create or overwrite files outside the intended directory, potentially leading to system compromise in environments processing untrusted archives, such as container build systems.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-17106"
        },
        {
          "category": "external",
          "summary": "RHBZ#2518147",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2518147"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-17106",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-17106"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-17106",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17106"
        },
        {
          "category": "external",
          "summary": "https://docs.docker.com/desktop/release-notes/#4860",
          "url": "https://docs.docker.com/desktop/release-notes/#4860"
        },
        {
          "category": "external",
          "summary": "https://docs.docker.com/engine/release-notes/29/#2970",
          "url": "https://docs.docker.com/engine/release-notes/29/#2970"
        },
        {
          "category": "external",
          "summary": "https://github.com/docker/cli/releases/tag/v29.7.0",
          "url": "https://github.com/docker/cli/releases/tag/v29.7.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/docker/compose/releases/tag/v5.4.0",
          "url": "https://github.com/docker/compose/releases/tag/v5.4.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/docker/sbx-releases/releases/tag/v0.38.0",
          "url": "https://github.com/docker/sbx-releases/releases/tag/v0.38.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/moby/go-archive/releases/tag/v0.3.0",
          "url": "https://github.com/moby/go-archive/releases/tag/v0.3.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/moby/go-archive/security/advisories/GHSA-hfg8-hc9c-6c3h",
          "url": "https://github.com/moby/go-archive/security/advisories/GHSA-hfg8-hc9c-6c3h"
        }
      ],
      "release_date": "2026-08-18T18:35:13.465000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, avoid processing tar archives from untrusted sources. When handling archives from potentially untrusted origins, ensure that the extraction process is executed with the least privileges necessary to limit the impact of any arbitrary file write attempts.",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/moby/go-archive: moby/go-archive: Arbitrary file write via link following in tar extraction"
    },
    {
      "cve": "CVE-2026-27145",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-06-02T23:01:08.992540+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484207"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484207",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/783621",
          "url": "https://go.dev/cl/783621"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79694",
          "url": "https://go.dev/issue/79694"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
          "url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5037",
          "url": "https://pkg.go.dev/vuln/GO-2026-5037"
        }
      ],
      "release_date": "2026-06-02T22:01:36.954000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        },
        {
          "category": "workaround",
          "details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
    },
    {
      "cve": "CVE-2026-33818",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T22:12:37.151735+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515815"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go encoding/asn1 package, as it can be triggered remotely without authentication. An attacker can provide a malformed ASN.1 structure, causing excessive recursion during unmarshalling and leading to stack exhaustion, which can render the service unavailable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515815",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515815"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33818",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/814980",
          "url": "https://go.dev/cl/814980"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80405",
          "url": "https://go.dev/issue/80405"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5972",
          "url": "https://pkg.go.dev/vuln/GO-2026-5972"
        }
      ],
      "release_date": "2026-08-13T21:58:52.821000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal"
    },
    {
      "cve": "CVE-2026-41178",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-06-04T16:01:10.300537+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484830"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in OpenTelemetry-Go, affecting versions 1.41.0 and 1.43.0. An attacker can exploit this flaw by sending oversized baggage headers, causing the `Parse` function to process invalid inputs and log errors, which can lead to resource exhaustion and service disruption in Red Hat products utilizing these affected OpenTelemetry-Go versions. The impact is considered Important due to the potential for remote, unauthenticated denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484830",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484830"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41178",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "https://github.com/open-telemetry/opentelemetry-go/pull/7880",
          "url": "https://github.com/open-telemetry/opentelemetry-go/pull/7880"
        },
        {
          "category": "external",
          "summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835",
          "url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835"
        }
      ],
      "release_date": "2026-06-04T14:38:23.707000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers"
    },
    {
      "cve": "CVE-2026-44740",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-06-01T17:01:53.685793+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2483894"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is rated as an Important severity issue. The `go-billy` library, a Go filesystem abstraction, is vulnerable to a denial of service when processing crafted or malformed input, such as untrusted repository data or filesystem structures. Insufficient validation and missing safety mechanisms can lead to panics, infinite loops, or excessive resource consumption, potentially impacting the availability of applications that rely on this library.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44740"
        },
        {
          "category": "external",
          "summary": "RHBZ#2483894",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483894"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44740",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44740"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-billy/releases/tag/v5.9.0",
          "url": "https://github.com/go-git/go-billy/releases/tag/v5.9.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1",
          "url": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6",
          "url": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6"
        }
      ],
      "release_date": "2026-06-01T16:04:50.358000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        },
        {
          "category": "workaround",
          "details": "To mitigate the issue, we suggest upgrading to versions 5.9.0+ or 6.0.0-alpha.1+",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation"
    },
    {
      "cve": "CVE-2026-45819",
      "cwe": {
        "id": "CWE-617",
        "name": "Reachable Assertion"
      },
      "discovery_date": "2026-08-13T11:30:54.323606+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515240"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in baseline-browser-mapping. This vulnerability allows an attacker to cause a denial of service by providing invalid or conflicting input parameters. The affected component improperly terminates the process instead of handling the input error gracefully, leading to immediate service disruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "baseline-browser-mapping: baseline-browser-mapping: Denial of Service via improper input handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This flaw in the \u0027baseline-browser-mapping\u0027 library can result in a denial of service. Applications utilizing this library may unexpectedly terminate if they process invalid or conflicting input parameters, potentially disrupting services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-45819"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515240",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515240"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-45819",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-45819"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45819",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45819"
        },
        {
          "category": "external",
          "summary": "https://github.com/web-platform-dx/baseline-browser-mapping/blob/b7881aa61c8a057e24468ab5ee18c5ecedbbf691/src/index.ts#L142",
          "url": "https://github.com/web-platform-dx/baseline-browser-mapping/blob/b7881aa61c8a057e24468ab5ee18c5ecedbbf691/src/index.ts#L142"
        },
        {
          "category": "external",
          "summary": "https://github.com/web-platform-dx/baseline-browser-mapping/pull/137/changes#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519",
          "url": "https://github.com/web-platform-dx/baseline-browser-mapping/pull/137/changes#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519"
        },
        {
          "category": "external",
          "summary": "https://www.npmjs.com/package/baseline-browser-mapping",
          "url": "https://www.npmjs.com/package/baseline-browser-mapping"
        }
      ],
      "release_date": "2026-08-13T11:03:42.504000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "baseline-browser-mapping: baseline-browser-mapping: Denial of Service via improper input handling"
    },
    {
      "cve": "CVE-2026-48050",
      "discovery_date": "2026-08-21T22:51:05.227994+00:00",
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Arc. This vulnerability allows a remote unauthenticated attacker to access Go debug pprof endpoints due to improper authentication bypass. Successful exploitation can lead to the disclosure of sensitive runtime state information and enable a CPU-burn Denial of Service (DoS) attack, impacting the availability and confidentiality of the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security has determined that this flaw does not affect any currently supported Red Hat products. The vulnerability resides in the Arc component (github.com/basekick-labs/arc), which is not shipped in, bundled with, or included as a dependency of any Red Hat offering. Because the affected code is not present in Red Hat products, they are not vulnerable to this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-48050"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-48050",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-48050"
        }
      ],
      "release_date": "2026-08-21T22:40:12.771000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        },
        {
          "category": "workaround",
          "details": "No mitigation is required. Red Hat products do not ship or include the affected Arc component (github.com/basekick-labs/arc), so they are not exposed to this vulnerability.",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/http/pprof: github.com/basekick-labs/arc: Arc: Information disclosure and Denial of Service via unauthenticated debug endpoints"
    },
    {
      "cve": "CVE-2026-50162",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-07-01T21:35:45+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2499694"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in oras-go. The file content store, intended to confine writes to a specified working directory, does not properly account for symbolic link (symlink) traversal. A remote attacker, by providing a specially crafted blob title, could exploit this vulnerability to create files outside the intended working directory. This filesystem boundary bypass allows for arbitrary file creation, potentially leading to unauthorized data modification or system compromise depending on the runtime environment.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "oras-go: oras-go: File store write outside working directory via symlink traversal",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-50162"
        },
        {
          "category": "external",
          "summary": "RHBZ#2499694",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499694"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-50162",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-50162"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50162",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50162"
        },
        {
          "category": "external",
          "summary": "https://github.com/oras-project/oras-go/security/advisories/GHSA-8xwf-rjm4-xvhv",
          "url": "https://github.com/oras-project/oras-go/security/advisories/GHSA-8xwf-rjm4-xvhv"
        }
      ],
      "release_date": "2026-07-01T21:35:45+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "oras-go: oras-go: File store write outside working directory via symlink traversal"
    },
    {
      "cve": "CVE-2026-56853",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-13T22:14:53.561638+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515827"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: Unencrypted HTTP/2 servers are susceptible to a denial of service due to improper handling of ReadHeaderTimeout during the client preface reading phase. This can lead to resource exhaustion and service unavailability in affected Red Hat products configured to support unencrypted HTTP/2.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515827",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515827"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56853",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/795540",
          "url": "https://go.dev/cl/795540"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80205",
          "url": "https://go.dev/issue/80205"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6089",
          "url": "https://pkg.go.dev/vuln/GO-2026-6089"
        }
      ],
      "release_date": "2026-08-13T21:58:53.092000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service"
    },
    {
      "cve": "CVE-2026-56858",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-08-13T22:16:32.034590+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515838"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash (\u0027/\u0027), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user\u0027s browser, potentially compromising user data or actions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important cross-site scripting (XSS) vulnerability in the Go `html/template` package. Applications utilizing this package to render untrusted input are susceptible to arbitrary content injection due to a flaw in how pathological inputs are handled, potentially leading to client-side script execution.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515838",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515838"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56858",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/807100",
          "url": "https://go.dev/cl/807100"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80435",
          "url": "https://go.dev/issue/80435"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6091",
          "url": "https://pkg.go.dev/vuln/GO-2026-6091"
        }
      ],
      "release_date": "2026-08-13T21:58:53.354000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input"
    },
    {
      "cve": "CVE-2026-56859",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T22:16:52.493058+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515840"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important denial of service flaw affects applications utilizing the Go `encoding/xml` package. This vulnerability arises from an issue in XML decoding where a recursion depth counter fails to reset, potentially leading to stack exhaustion when processing malicious XML input.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515840",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515840"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56859",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803320",
          "url": "https://go.dev/cl/803320"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80481",
          "url": "https://go.dev/issue/80481"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6088",
          "url": "https://pkg.go.dev/vuln/GO-2026-6088"
        }
      ],
      "release_date": "2026-08-13T21:58:52.959000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue"
    },
    {
      "cve": "CVE-2026-56860",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-13T22:13:18.319384+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515820"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory (\u0027..\u0027) segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go `net/url` package. Applications built with Go that process untrusted URLs containing parent directory segments (\u0027..\u0027) may be vulnerable to excessive resource consumption due to quadratic time complexity in path resolution. This can lead to a denial of service, impacting the availability of affected services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515820",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515820"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56860",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803681",
          "url": "https://go.dev/cl/803681"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80494",
          "url": "https://go.dev/issue/80494"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6218",
          "url": "https://pkg.go.dev/vuln/GO-2026-6218"
        }
      ],
      "release_date": "2026-08-13T21:58:53.731000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution"
    },
    {
      "cve": "CVE-2026-56862",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-08-13T22:16:41.928450+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515839"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `golang` `crypto/tls` package. A remote, unauthenticated attacker can exploit this flaw by continuously sending `KeyUpdate` messages during a TLS handshake, forcing the server to perform indefinite key derivation operations. This resource exhaustion can lead to a denial of service for applications and services in Red Hat products that use the affected `crypto/tls` library and are exposed to untrusted network clients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515839",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515839"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56862",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/804261",
          "url": "https://go.dev/cl/804261"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80528",
          "url": "https://go.dev/issue/80528"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6090",
          "url": "https://pkg.go.dev/vuln/GO-2026-6090"
        }
      ],
      "release_date": "2026-08-13T21:58:53.216000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages"
    },
    {
      "cve": "CVE-2026-59869",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-07-08T16:01:38.408322+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498122"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "js-yaml: js-yaml: Denial of Service via crafted YAML documents",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important. Red Hat products utilizing `js-yaml` to process untrusted YAML input are susceptible to a denial of service, as a remote attacker can provide a crafted document that consumes excessive CPU resources. This is considered Important due to the potential for service disruption without requiring authentication or complex attack vectors.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59869"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498122",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498122"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59869",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59869"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7",
          "url": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4",
          "url": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m",
          "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"
        }
      ],
      "release_date": "2026-07-08T15:15:54.675000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        },
        {
          "category": "workaround",
          "details": "To reduce exposure, restrict the processing of untrusted YAML documents by applications that rely on `js-yaml`. Implement robust input validation and sanitization for all YAML data originating from external or untrusted sources. Consider limiting network access to services that parse YAML content to trusted networks or clients through appropriate firewall configurations.",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "js-yaml: js-yaml: Denial of Service via crafted YAML documents"
    },
    {
      "cve": "CVE-2026-69152",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-03T18:01:13.566423+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510722"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Any applications that pass user-controlled input to the `expand()` function are vulnerable to this issue. This flaw can result in an excessive consumption of memory that eventually terminates the process or blocks the event loop, both causing a denial of service. As this vulnerability allows a remote attacker to cause a denial of service, it has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510722",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510722"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-69152",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69152",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d",
          "url": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac",
          "url": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf",
          "url": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031",
          "url": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895",
          "url": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895"
        }
      ],
      "release_date": "2026-08-03T16:33:36.324000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, do not pass untrusted input to the expand() function.",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation"
    },
    {
      "cve": "CVE-2026-71556",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "discovery_date": "2026-08-07T16:51:14.251077+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2512562"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in go-git, an extensible Git implementation library. Worktree operations, such as checkout, status, and add, resolve symbolic links within the working tree without proper boundary confinement. This allows a remote attacker to craft a malicious repository containing a symlink, which, when cloned and its worktree operations are used, can lead to reading from or writing to arbitrary files outside the intended working directory. This could result in information disclosure or arbitrary file modification.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "go-git is a pure-Go implementation of Git. During worktree operations (checkout, status, add), go-git resolves symbolic links without confining resolution to the worktree boundary, so a maliciously crafted repository containing a symlink can cause a consuming application to read from or write to files outside the intended working directory when that repository is cloned and its worktree operations are used. Exploitation requires the application to clone an attacker-controlled repository and then perform worktree operations against it; applications that only process trusted repositories are not exposed. Red Hat rates the impact of this flaw as Important.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-71556"
        },
        {
          "category": "external",
          "summary": "RHBZ#2512562",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512562"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-71556",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-71556"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-71556",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-71556"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/commit/008a78f2dd86f52544ddff8b8e8ddeecdf3f7aab",
          "url": "https://github.com/go-git/go-git/commit/008a78f2dd86f52544ddff8b8e8ddeecdf3f7aab"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/commit/661d1c7f101d34e002a3cfcf8dbea5b7421d07ac",
          "url": "https://github.com/go-git/go-git/commit/661d1c7f101d34e002a3cfcf8dbea5b7421d07ac"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/releases/tag/v5.19.2",
          "url": "https://github.com/go-git/go-git/releases/tag/v5.19.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/releases/tag/v6.0.0-alpha.5",
          "url": "https://github.com/go-git/go-git/releases/tag/v6.0.0-alpha.5"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/security/advisories/GHSA-hc8v-wwc9-vgxm",
          "url": "https://github.com/go-git/go-git/security/advisories/GHSA-hc8v-wwc9-vgxm"
        }
      ],
      "release_date": "2026-08-07T16:37:40.058000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        },
        {
          "category": "workaround",
          "details": "To reduce the risk of exploitation, do not clone or run worktree operations (checkout, status, add) on Git repositories originating from untrusted or attacker-controllable sources using an affected version of go-git. The issue is resolved by updating to go-git 5.19.2 or 6.0.0-alpha.5 (or later).",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution"
    },
    {
      "cve": "CVE-2026-73089",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-11T17:12:48.012036+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2514195"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Browserslist, a configuration tool for front-end development. An attacker can exploit this vulnerability by influencing repeated query values, leading to unbounded memory growth. This issue can cause the application to consume excessive memory, resulting in an out-of-memory process crash and a Denial of Service (DoS) for affected systems.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "browserslist: Browserslist: Denial of Service via unbounded memory growth from distinct query results",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `browserslist` library, which is used across several Red Hat products and services. The flaw allows an attacker to trigger unbounded memory growth by influencing query values, potentially leading to an out-of-memory crash and service unavailability. This is considered Important due to the potential for remote exploitation and significant impact on service stability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73089"
        },
        {
          "category": "external",
          "summary": "RHBZ#2514195",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514195"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73089",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73089"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73089",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73089"
        },
        {
          "category": "external",
          "summary": "https://github.com/browserslist/browserslist/commit/f2931a3ff2a3a31abf84ef01a7400b270aad6405",
          "url": "https://github.com/browserslist/browserslist/commit/f2931a3ff2a3a31abf84ef01a7400b270aad6405"
        },
        {
          "category": "external",
          "summary": "https://github.com/browserslist/browserslist/releases/tag/4.28.7",
          "url": "https://github.com/browserslist/browserslist/releases/tag/4.28.7"
        },
        {
          "category": "external",
          "summary": "https://github.com/browserslist/browserslist/security/advisories/GHSA-c83g-rgw3-j3cx",
          "url": "https://github.com/browserslist/browserslist/security/advisories/GHSA-c83g-rgw3-j3cx"
        }
      ],
      "release_date": "2026-08-11T17:05:38.760000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "browserslist: Browserslist: Denial of Service via unbounded memory growth from distinct query results"
    },
    {
      "cve": "CVE-2026-73643",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "discovery_date": "2026-08-13T18:11:25.926202+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515531"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in js-yaml, a JavaScript YAML parser. A remote attacker could exploit this vulnerability by providing specially crafted YAML input containing nested flow collections. This can lead to exponential parsing time when the application processes untrusted input, consuming excessive CPU resources. This resource exhaustion can block the Node.js event loop and cause a Denial of Service (DoS) for the affected process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "js-yaml: js-yaml: Denial of Service via exponential parsing in flow collections",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial-of-service flaw in the `js-yaml` library, where processing specially crafted YAML input can lead to exponential parsing time. This can cause applications utilizing affected versions of `js-yaml` within Red Hat products to consume excessive CPU resources, potentially blocking the Node.js event loop and leading to service unavailability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73643"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515531",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515531"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73643",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73643"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73643",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73643"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/3e5240f9cbe645ce5afb58524954a13c8539c853",
          "url": "https://github.com/nodeca/js-yaml/commit/3e5240f9cbe645ce5afb58524954a13c8539c853"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-pm4m-ph32-ghv5",
          "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-pm4m-ph32-ghv5"
        }
      ],
      "release_date": "2026-08-13T17:47:30.404000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict applications from processing untrusted YAML input with affected versions of the `js-yaml` library. Implement strict input validation to ensure that only trusted and well-formed YAML data is processed. If the application is exposed to external, untrusted sources, consider isolating the application or implementing additional resource limits to prevent complete service disruption.",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "js-yaml: js-yaml: Denial of Service via exponential parsing in flow collections"
    },
    {
      "cve": "CVE-2026-75899",
      "cwe": {
        "id": "CWE-140",
        "name": "Improper Neutralization of Delimiters"
      },
      "discovery_date": "2026-08-24T09:51:05.559475+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521778"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri, a URI parser for Node.js. The component incorrectly decodes percent escapes in a hostname twice during URI parsing and authority recomposition. This double decoding can allow a remote attacker to manipulate a URI to point to a different network destination, such as a loopback address. This vulnerability can lead to Server-Side Request Forgery (SSRF) and bypass host-based security policies.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in the `fast-uri` library, used by applications for URI parsing, allows for Server-Side Request Forgery (SSRF) and host-policy bypass. By crafting a doubly percent-encoded hostname in an untrusted HTTP-family URI, an attacker could redirect internal application requests to arbitrary network destinations, potentially bypassing security controls and accessing internal services. This risk is present in Red Hat products that process untrusted URIs using affected versions of `fast-uri`.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-75899"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521778",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521778"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-75899",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-75899"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-75899",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75899"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-fph4-wmhf-6fwf",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-fph4-wmhf-6fwf"
        }
      ],
      "release_date": "2026-08-24T09:40:19.801000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding"
    },
    {
      "cve": "CVE-2026-75931",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2026-08-24T09:51:02.191062+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521777"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri, a URI parser for Node.js. This vulnerability arises because the parser fails to consistently convert internationalized domain names (IDN) to their standard ASCII form when processing scheme-relative references. This inconsistency can lead to host confusion, where an application might validate a URI against a security policy using one hostname, but then resolve to a different, potentially malicious, hostname. This discrepancy could allow an attacker to bypass security policies and access unauthorized resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Host confusion via skipped IDN canonicalization",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-75931"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521777",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521777"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-75931",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-75931"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-75931",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75931"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8"
        }
      ],
      "release_date": "2026-08-24T09:30:04.212000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Host confusion via skipped IDN canonicalization"
    },
    {
      "cve": "CVE-2026-75975",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2026-08-24T10:11:05.356309+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521779"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri, a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not fully validate the IPv6 grammar, allowing invalid trailing text in an authority to be silently discarded. This can lead to a malformed, attacker-controlled host being normalized into a different, valid IPv6 destination, such as a local or private IPv6 target. An application normalizing untrusted URLs before outbound requests, redirects, or proxy routing could be redirected, resulting in a server-side request forgery (SSRF) and address-policy bypass.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A Server-Side Request Forgery (SSRF) flaw was found in fast-uri, a URI parser for Node.js. The parser\u0027s incomplete validation of bracketed IPv6 literals allows attackers to inject malformed authority components that are silently normalized to different valid IPv6 destinations. This could allow an attacker to bypass URL allowlists or network-based access controls, potentially enabling unauthorized access to internal services, cloud metadata endpoints, or other network resources. This issue affects Red Hat products that bundle fast-uri as part of their Node.js dependencies. Fixed versions are available: fast-uri 2.4.5, 3.1.6, and 4.1.3.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-75975"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521779",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521779"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-75975",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-75975"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-75975",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75975"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-f65p-4m7j-42xc",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-f65p-4m7j-42xc"
        }
      ],
      "release_date": "2026-08-24T09:58:07.698000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Until updates are available, restrict the processing of user-supplied URIs to trusted sources only, implement strict allowlists for destination hosts (preferably IP-based rather than hostname-based), and apply egress filtering to prevent server-initiated connections to internal networks or cloud metadata services.",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization"
    },
    {
      "cve": "CVE-2026-76172",
      "cwe": {
        "id": "CWE-76",
        "name": "Improper Neutralization of Equivalent Special Elements"
      },
      "discovery_date": "2026-08-24T10:31:12.887477+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521798"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri, a software component used for parsing Uniform Resource Identifiers (URIs) in Node.js applications. This vulnerability arises from an issue in how fast-uri processes the scheme part of a URI, specifically when it contains special characters that are percent-encoded. An attacker can exploit this by crafting a malicious URI, causing the parser to misinterpret the host, which can lead to serious security risks. These risks include unauthorized redirection to external websites, server-side request forgery (SSRF) where the application makes unintended requests to internal or external resources, and bypassing security policies.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A host confusion vulnerability was found in fast-uri, a URI parser for Node.js. The parser runs a legacy decoding pass over the scheme component and never re-escapes the result. As a consequence, an input whose scheme carries percent-encoded slashes parses as having no authority (undefined host), yet resolving or normalizing that same input emits a network-path reference with an attacker-chosen authority. Applications that normalize or resolve untrusted URLs before a redirect check, host allowlist, or outbound request decision can be steered to an attacker-controlled domain, enabling server-side request forgery (SSRF), open redirect, or address-policy bypass. Additionally, a normalized URI in a response header can carry injected carriage return line feed (CRLF) characters, enabling HTTP response splitting attacks such as cache poisoning or session hijacking. This issue affects Red Hat products that bundle fast-uri as part of their Node.js dependencies. Fixed versions are available: fast-uri 2.4.5, 3.1.6, and 4.1.3.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-76172"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521798",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521798"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-76172",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-76172"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-76172",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76172"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-jqff-g426-hqxp",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-jqff-g426-hqxp"
        }
      ],
      "release_date": "2026-08-24T10:07:56.440000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        },
        {
          "category": "workaround",
          "details": "There is no mitigation available for this issue. Apply updates as they become available from Red Hat product teams.",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects"
    },
    {
      "cve": "CVE-2026-81521",
      "cwe": {
        "id": "CWE-791",
        "name": "Incomplete Filtering of Special Elements"
      },
      "discovery_date": "2026-08-27T20:16:51.506209+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2525215"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the MongoDB Go Driver. The `Client.BulkWrite` operation does not properly validate database names, allowing a specially crafted name with reserved characters to redirect write operations. This vulnerability could enable an attacker to modify or corrupt data in unintended databases and collections.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "go.mongodb.org/mongo-driver: MongoDB Go Driver: Write redirection via unvalidated database name in Client.BulkWrite",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-81521"
        },
        {
          "category": "external",
          "summary": "RHBZ#2525215",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525215"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-81521",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-81521"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-81521",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81521"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/go.mongodb.org/mongo-driver/v2@v2.8.2",
          "url": "https://pkg.go.dev/go.mongodb.org/mongo-driver/v2@v2.8.2"
        }
      ],
      "release_date": "2026-08-27T18:31:45.450000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "go.mongodb.org/mongo-driver: MongoDB Go Driver: Write redirection via unvalidated database name in Client.BulkWrite"
    },
    {
      "cve": "CVE-2026-84292",
      "cwe": {
        "id": "CWE-140",
        "name": "Improper Neutralization of Delimiters"
      },
      "discovery_date": "2026-09-02T20:21:15.599288+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2527747"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri. This component improperly serializes the port component of a Uniform Resource Identifier (URI) without validating its content. A remote attacker can exploit this by crafting a malicious port value that injects authority delimiters. This manipulation can demote the intended host to user information and redirect the authority to an attacker-controlled host, leading to information disclosure as applications interpret the attacker\u0027s host as legitimate.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw. Applications utilizing the `fast-uri` library in Red Hat environments are susceptible to authority injection if they process untrusted data as the port component of a URI. This could allow an attacker to redirect network traffic to an arbitrary host, compromising communication integrity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84292"
        },
        {
          "category": "external",
          "summary": "RHBZ#2527747",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527747"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84292",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84292"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84292",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84292"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3"
        }
      ],
      "release_date": "2026-09-02T20:09:51.415000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization"
    },
    {
      "cve": "CVE-2026-84375",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-09-01T21:51:30.205823+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2527118"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in js-yaml, a JavaScript YAML parser. An attacker can exploit this by providing a specially crafted YAML document that causes the parser to perform excessive processing when handling merge keys with empty sources. This can lead to prolonged CPU consumption, effectively causing a denial of service (DoS) for applications that process untrusted YAML input.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in js-yaml, affecting applications that process untrusted YAML input. The flaw allows an attacker to craft a small YAML document that, when parsed, can lead to prolonged CPU consumption due to inefficient merge key processing, potentially exhausting system resources. This is particularly relevant where applications handle external YAML data and have merge processing enabled by default.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84375"
        },
        {
          "category": "external",
          "summary": "RHBZ#2527118",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527118"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84375",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84375"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84375",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84375"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639",
          "url": "https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/6a8e05f9a485188ed730ac81e81ae221352ef480",
          "url": "https://github.com/nodeca/js-yaml/commit/6a8e05f9a485188ed730ac81e81ae221352ef480"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/d90b6612a5a84385bdcb556c44578eac76dc0f6b",
          "url": "https://github.com/nodeca/js-yaml/commit/d90b6612a5a84385bdcb556c44578eac76dc0f6b"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/pull/797",
          "url": "https://github.com/nodeca/js-yaml/pull/797"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.2",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.2",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-2883-xcg3-v3hh",
          "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-2883-xcg3-v3hh"
        }
      ],
      "release_date": "2026-09-01T21:43:13.617000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing"
    },
    {
      "cve": "CVE-2026-84394",
      "cwe": {
        "id": "CWE-1289",
        "name": "Improper Validation of Unsafe Equivalence in Input"
      },
      "discovery_date": "2026-09-02T20:31:21.036047+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2527756"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri. The library incorrectly processes Uniform Resource Identifier (URI) hosts containing unbalanced brackets, leading to a discrepancy in how the host is parsed by fast-uri compared to other HTTP clients. This host confusion can allow an attacker to bypass security policies, such as Server-Side Request Forgery (SSRF) denylists or redirect allowlists, by causing an application to evaluate its policy against an incorrect host string. This could result in unintended network requests or access to unauthorized resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is rated Moderate because successful exploitation requires a specific configuration where fast-uri handles security checks but a different client resolves the URL, enabling security policy bypasses without direct code execution. This affects fast-uri versions 2.4.5, 3.1.6, and 4.1.3 (fixed in 2.4.6, 3.1.7, and 4.1.4).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
          "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84394"
        },
        {
          "category": "external",
          "summary": "RHBZ#2527756",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527756"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84394",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84394"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84394",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84394"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-58mr-gqgx-xq4g",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-58mr-gqgx-xq4g"
        }
      ],
      "release_date": "2026-09-02T20:25:35.399000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:20:25+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2",
          "product_ids": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68006"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:c07fc974387182b0901c4207b6322c8cbdc0c450248ead8114cd460c187844a5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:43abd7656958af997716f39af28fb87e034a6af795bd24f29c137d5512c4b262_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:524e9f0637943ff6bdf3b1115cfbdd7d5c4c9d26237b961376d252766e95f48d_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:d1c7da08eb272be975b97b674d43e7852d3bd8787e19377ae322b02478232eb9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:dcc7300f1826d65c8200fe7ba5434600c0a7520e050fbae7f9a394d4eb662a8c_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:06c6652809bf74d48049d453aba530f9532cb59fcead4ad0a07089822ea51bb4_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:23c2f14159fa23781bcf9c1fa8b993481f0f099800a852c3eb009f709503c2eb_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:75c7d5351ce497436e2f24fb66a49611ef1a15cfc5c49adde92bd609faff06fa_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:f82dce35684695affa52e1155b2be8e865870cc92317cbe74b3c0fff8842aaf8_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:415bed99e587889c5fc774957a1bbccc6fe5cd6cfaac60342a98a2159a68adb6_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:8f82cda5b12f52c2d298a55f63f4a562bab7687d705ea30aaf0f2ac91074a06a_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:3468b781f5e9c49ea1445de85d911e2f0bb0e8a5cd439394e4abedb5396552c7_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:a77066d1b73a698daf9f9e0fea6bee25e31ad0076ba97aa39c7acb2bf5383e70_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:0368ec1b33bb8fb3084c939329aa3a7ffaa422262fffa2091adbea1bb5ec4fa2_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:bb44ab97b0070dde80ae6f591dc4b2070ce121403eae9145a3075ca14d6220a6_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:14aee2f06947935d5f00159ea45f80ad4f9a0b6a13e502024bf7152a5a8f9e5c_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:6debd45b617dffa5a1c4a0fbb28373e44e08bc775f692a3529cd70a5614bfb38_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6d3528b80e2963d736c32c83ff514324cff48a48851e801da3ac8d45e72a6247_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6dab8de581e257661046180f2e88bc576217b19b75d5d65f83e96eb635fd99e5_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:238db2122047cf44d3645711f8b62077ba0da832a196b1b6c7740e660f672130_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:60d221c9c8badef74ade9d8a7173267c3b8bc1bde43aa13fd626b03ff8002393_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:8fc038cea92e459b6fcee4d9afef0120e2447ab99749741e6f9b81e5434876c9_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:eb910fabee98ba81cf606000b6fdadd2c18d9cbdc22d3ef0aff399f53534f43e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:31d9a619e50f6a2d4310df31791f9288e339ccb0770bcf178d9499860e167426_amd64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:f83dab17987b97fd282ed813d211aa84efc13c9ce06ee4c902a2aa334b059815_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:c768b190e580ad40eba090cbefb1b51de693429001c749042f3cee00c5f55a3e_arm64",
            "Red Hat Edge Manager 1.2:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:e0b83499d6271f7edece85e7ebf0ce6a210de7e1ec652461525832d40ecd3729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.