RHSA-2026:68044

Vulnerability from csaf_redhat - Published: 2026-09-16 12:48 - Updated: 2026-09-22 14:01
Summary
Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.4 Security Update
Severity
Important
Notes
Topic: Red Hat Edge Manager Version 1.1.4 Security Update
Details: Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused management of edge devices and applications. It supports image-mode RHEL and container workloads that run on Podman/Docker or Kubernetes. RHEM is now available as a standalone feature, providing greater flexibility for edge deployments. In addition to the standalone version, RHEM continues to be offered as a plugin for the following platforms: * Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge devices. * Red Hat Ansible Automation Platform (AAP): Integrates edge management with Ansible automation. This integration enables organizations to optimize the management and orchestration of their fleets of edge devices; whether its thousands of dispersed retail point-of-sale systems or industrial machinery on remote factory floors. Value for customers and partners: * This solution not only helps customers manage thousands of devices but helps scale operations. * To manage large-scale deployments, customers need to be able to integrate with their existing management systems, support remote configuration and over-the-air updates, and collect telemetry data for advanced analytics. * Red Hat Edge Manager offers a simple and security-focused lifecycle management, from onboarding to decommissioning of edge devices. This complete end-to-end solution empowers organizations to gain the most value from the fleets of devices that generate data, all from a centralized location.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-6377

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Next4Biz Information Technologies Inc. CSM (Customer Service Management) allows Path Traversal. This issue affects CSM (Customer Service Management): from 6.8.9 before 8.0.3.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64 —
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64 —
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64 —
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64 —
Threats
Impact Important
CVE-2026-13149

A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1333 - Inefficient Regular Expression Complexity
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64 —
Workaround
Threats
Impact Important
CVE-2026-25681

A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Fixed 24 products, the same list as for CVE-2026-6377
Known not affected 4 products, the same list as for CVE-2026-6377
Threats
Impact Important
CVE-2026-27136

A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Fixed 24 products, the same list as for CVE-2026-6377
Known not affected 4 products, the same list as for CVE-2026-6377
Threats
Impact Important
CVE-2026-27145

A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-606 - Unchecked Input for Loop Condition
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64 —
Workaround
Threats
Impact Important
CVE-2026-33818

A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Affected products
Fixed 2 products, the same list as for CVE-2026-27145
Known not affected 26 products, the same list as for CVE-2026-27145
Threats
Impact Important
CVE-2026-39820

A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-606 - Unchecked Input for Loop Condition
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64 —
Workaround
Threats
Impact Important
CVE-2026-39831

A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CWE-347 - Improper Verification of Cryptographic Signature
Affected products
Fixed 24 products, the same list as for CVE-2026-6377
Known not affected 4 products, the same list as for CVE-2026-6377
Threats
Impact Important
CVE-2026-41178

A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 24 products, the same list as for CVE-2026-6377
Known not affected 4 products, the same list as for CVE-2026-6377
Threats
Impact Important
CVE-2026-42306

A flaw was found in the Moby container framework. A race condition occurs during the `docker cp` mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could overwrite host files, potentially leading to data corruption or a denial of service.

7.2 (High)
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H
CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition
Affected products
Fixed 24 products, the same list as for CVE-2026-6377
Known not affected 4 products, the same list as for CVE-2026-6377
Threats
Impact Important
CVE-2026-42499

A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1046 - Creation of Immutable Text Using String Concatenation
Affected products
Fixed 2 products, the same list as for CVE-2026-39820
Known not affected 26 products, the same list as for CVE-2026-39820
Threats
Impact Important
CVE-2026-42504

A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1050 - Excessive Platform Resource Consumption within a Loop
Affected products
Fixed 2 products, the same list as for CVE-2026-27145
Known not affected 26 products, the same list as for CVE-2026-27145
Threats
Impact Important
CVE-2026-44740

A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-606 - Unchecked Input for Loop Condition
Affected products
Fixed 24 products, the same list as for CVE-2026-6377
Known not affected 4 products, the same list as for CVE-2026-6377
Threats
Impact Important
CVE-2026-45819

A flaw was found in baseline-browser-mapping. This vulnerability allows an attacker to cause a denial of service by providing invalid or conflicting input parameters. The affected component improperly terminates the process instead of handling the input error gracefully, leading to immediate service disruption.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-617 - Reachable Assertion
Affected products
Fixed 4 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-46597

A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-681 - Incorrect Conversion between Numeric Types
Affected products
Fixed 24 products, the same list as for CVE-2026-6377
Known not affected 4 products, the same list as for CVE-2026-6377
Threats
Impact Important
CVE-2026-48050

A flaw was found in Arc. This vulnerability allows a remote unauthenticated attacker to access Go debug pprof endpoints due to improper authentication bypass. Successful exploitation can lead to the disclosure of sensitive runtime state information and enable a CPU-burn Denial of Service (DoS) attack, impacting the availability and confidentiality of the system.

8.2 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64 —
Vendor Fix fix
Workaround
Threats
Impact Important
CVE-2026-50162

A flaw was found in oras-go. The file content store, intended to confine writes to a specified working directory, does not properly account for symbolic link (symlink) traversal. A remote attacker, by providing a specially crafted blob title, could exploit this vulnerability to create files outside the intended working directory. This filesystem boundary bypass allows for arbitrary file creation, potentially leading to unauthorized data modification or system compromise depending on the runtime environment.

5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products
Fixed 24 products, the same list as for CVE-2026-6377
Known not affected 4 products, the same list as for CVE-2026-6377
Threats
Impact Moderate
CVE-2026-56853

A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 2 products, the same list as for CVE-2026-27145
Known not affected 26 products, the same list as for CVE-2026-27145
Threats
Impact Important
CVE-2026-56858

A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Fixed 2 products, the same list as for CVE-2026-39820
Known not affected 26 products, the same list as for CVE-2026-39820
Threats
Impact Important
CVE-2026-56859

A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Affected products
Fixed 2 products, the same list as for CVE-2026-39820
Known not affected 26 products, the same list as for CVE-2026-39820
Threats
Impact Important
CVE-2026-56860

A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory ('..') segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 2 products, the same list as for CVE-2026-27145
Known not affected 26 products, the same list as for CVE-2026-27145
Threats
Impact Important
CVE-2026-56862

A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1050 - Excessive Platform Resource Consumption within a Loop
Affected products
Fixed 2 products, the same list as for CVE-2026-27145
Known not affected 26 products, the same list as for CVE-2026-27145
Threats
Impact Important
CVE-2026-59869

A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-606 - Unchecked Input for Loop Condition
Affected products
Fixed 4 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-69152

A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 4 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-71556

A flaw was found in go-git, an extensible Git implementation library. Worktree operations, such as checkout, status, and add, resolve symbolic links within the working tree without proper boundary confinement. This allows a remote attacker to craft a malicious repository containing a symlink, which, when cloned and its worktree operations are used, can lead to reading from or writing to arbitrary files outside the intended working directory. This could result in information disclosure or arbitrary file modification.

7.1 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L
CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Affected products
Fixed 24 products, the same list as for CVE-2026-6377
Known not affected 4 products, the same list as for CVE-2026-6377
Threats
Impact Important
CVE-2026-73088

A flaw was found in Browserslist, a tool for sharing browser and Node.js versions. An attacker could provide specially crafted statistics data, which the tool processes without proper validation. This improper handling of untrusted data can lead to prototype pollution, potentially causing the application to crash and resulting in a denial of service.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
Affected products
Fixed 4 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-73089

A flaw was found in Browserslist, a configuration tool for front-end development. An attacker can exploit this vulnerability by influencing repeated query values, leading to unbounded memory growth. This issue can cause the application to consume excessive memory, resulting in an out-of-memory process crash and a Denial of Service (DoS) for affected systems.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 4 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-73643

A flaw was found in js-yaml, a JavaScript YAML parser. A remote attacker could exploit this vulnerability by providing specially crafted YAML input containing nested flow collections. This can lead to exponential parsing time when the application processes untrusted input, consuming excessive CPU resources. This resource exhaustion can block the Node.js event loop and cause a Denial of Service (DoS) for the affected process.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1333 - Inefficient Regular Expression Complexity
Affected products
Fixed 4 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-75899

A flaw was found in fast-uri, a URI parser for Node.js. The component incorrectly decodes percent escapes in a hostname twice during URI parsing and authority recomposition. This double decoding can allow a remote attacker to manipulate a URI to point to a different network destination, such as a loopback address. This vulnerability can lead to Server-Side Request Forgery (SSRF) and bypass host-based security policies.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-140 - Improper Neutralization of Delimiters
Affected products
Fixed 4 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-75931

A flaw was found in fast-uri, a URI parser for Node.js. This vulnerability arises because the parser fails to consistently convert internationalized domain names (IDN) to their standard ASCII form when processing scheme-relative references. This inconsistency can lead to host confusion, where an application might validate a URI against a security policy using one hostname, but then resolve to a different, potentially malicious, hostname. This discrepancy could allow an attacker to bypass security policies and access unauthorized resources.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
Affected products
Fixed 4 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-75975

A flaw was found in fast-uri, a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not fully validate the IPv6 grammar, allowing invalid trailing text in an authority to be silently discarded. This can lead to a malformed, attacker-controlled host being normalized into a different, valid IPv6 destination, such as a local or private IPv6 target. An application normalizing untrusted URLs before outbound requests, redirects, or proxy routing could be redirected, resulting in a server-side request forgery (SSRF) and address-policy bypass.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-918 - Server-Side Request Forgery (SSRF)
Affected products
Fixed 4 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-76172

A flaw was found in fast-uri, a software component used for parsing Uniform Resource Identifiers (URIs) in Node.js applications. This vulnerability arises from an issue in how fast-uri processes the scheme part of a URI, specifically when it contains special characters that are percent-encoded. An attacker can exploit this by crafting a malicious URI, causing the parser to misinterpret the host, which can lead to serious security risks. These risks include unauthorized redirection to external websites, server-side request forgery (SSRF) where the application makes unintended requests to internal or external resources, and bypassing security policies.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-76 - Improper Neutralization of Equivalent Special Elements
Affected products
Fixed 4 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-81521

A flaw was found in the MongoDB Go Driver. The `Client.BulkWrite` operation does not properly validate database names, allowing a specially crafted name with reserved characters to redirect write operations. This vulnerability could enable an attacker to modify or corrupt data in unintended databases and collections.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-791 - Incomplete Filtering of Special Elements
Affected products
Fixed 24 products, the same list as for CVE-2026-6377
Known not affected 4 products, the same list as for CVE-2026-6377
Threats
Impact Important
CVE-2026-84292

A flaw was found in fast-uri. This component improperly serializes the port component of a Uniform Resource Identifier (URI) without validating its content. A remote attacker can exploit this by crafting a malicious port value that injects authority delimiters. This manipulation can demote the intended host to user information and redirect the authority to an attacker-controlled host, leading to information disclosure as applications interpret the attacker's host as legitimate.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-140 - Improper Neutralization of Delimiters
Affected products
Fixed 4 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-84375

A flaw was found in js-yaml, a JavaScript YAML parser. An attacker can exploit this by providing a specially crafted YAML document that causes the parser to perform excessive processing when handling merge keys with empty sources. This can lead to prolonged CPU consumption, effectively causing a denial of service (DoS) for applications that process untrusted YAML input.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
Affected products
Fixed 4 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Moderate
CVE-2026-84394

A flaw was found in fast-uri. The library incorrectly processes Uniform Resource Identifier (URI) hosts containing unbalanced brackets, leading to a discrepancy in how the host is parsed by fast-uri compared to other HTTP clients. This host confusion can allow an attacker to bypass security policies, such as Server-Side Request Forgery (SSRF) denylists or redirect allowlists, by causing an application to evaluate its policy against an incorrect host string. This could result in unintended network requests or access to unauthorized resources.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-1289 - Improper Validation of Unsafe Equivalence in Input
Affected products
Fixed 4 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:68044 self
https://access.redhat.com/security/cve/CVE-2026-13149 external
https://access.redhat.com/security/cve/CVE-2026-25681 external
https://access.redhat.com/security/cve/CVE-2026-27136 external
https://access.redhat.com/security/cve/CVE-2026-27145 external
https://access.redhat.com/security/cve/CVE-2026-33818 external
https://access.redhat.com/security/cve/CVE-2026-39820 external
https://access.redhat.com/security/cve/CVE-2026-39831 external
https://access.redhat.com/security/cve/CVE-2026-41178 external
https://access.redhat.com/security/cve/CVE-2026-42306 external
https://access.redhat.com/security/cve/CVE-2026-42499 external
https://access.redhat.com/security/cve/CVE-2026-42504 external
https://access.redhat.com/security/cve/CVE-2026-44740 external
https://access.redhat.com/security/cve/CVE-2026-45819 external
https://access.redhat.com/security/cve/CVE-2026-46597 external
https://access.redhat.com/security/cve/CVE-2026-48050 external
https://access.redhat.com/security/cve/CVE-2026-50162 external
https://access.redhat.com/security/cve/CVE-2026-56853 external
https://access.redhat.com/security/cve/CVE-2026-56858 external
https://access.redhat.com/security/cve/CVE-2026-56859 external
https://access.redhat.com/security/cve/CVE-2026-56860 external
https://access.redhat.com/security/cve/CVE-2026-56862 external
https://access.redhat.com/security/cve/CVE-2026-59869 external
https://access.redhat.com/security/cve/CVE-2026-6377 external
https://access.redhat.com/security/cve/CVE-2026-69152 external
https://access.redhat.com/security/cve/CVE-2026-71556 external
https://access.redhat.com/security/cve/CVE-2026-73088 external
https://access.redhat.com/security/cve/CVE-2026-73089 external
https://access.redhat.com/security/cve/CVE-2026-73643 external
https://access.redhat.com/security/cve/CVE-2026-75899 external
https://access.redhat.com/security/cve/CVE-2026-75931 external
https://access.redhat.com/security/cve/CVE-2026-75975 external
https://access.redhat.com/security/cve/CVE-2026-76172 external
https://access.redhat.com/security/cve/CVE-2026-81521 external
https://access.redhat.com/security/cve/CVE-2026-84292 external
https://access.redhat.com/security/cve/CVE-2026-84375 external
https://access.redhat.com/security/cve/CVE-2026-84394 external
https://access.redhat.com/security/updates/classi… external
https://docs.redhat.com/en/documentation/red_hat_… external
https://docs.redhat.com/en/documentation/red_hat_… external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-6377 self
https://www.cve.org/CVERecord?id=CVE-2026-6377 external
https://access.redhat.com/security/cve/CVE-2026-13149 self
https://bugzilla.redhat.com/show_bug.cgi?id=2494813 external
https://www.cve.org/CVERecord?id=CVE-2026-13149 external
https://nvd.nist.gov/vuln/detail/CVE-2026-13149 external
https://github.com/juliangruber/brace-expansion/c… external
https://www.npmjs.com/package/brace-expansion external
https://access.redhat.com/security/cve/CVE-2026-25681 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480761 external
https://www.cve.org/CVERecord?id=CVE-2026-25681 external
https://nvd.nist.gov/vuln/detail/CVE-2026-25681 external
https://go.dev/cl/781703 external
https://go.dev/issue/79574 external
https://groups.google.com/g/golang-announce/c/iI-… external
https://pkg.go.dev/vuln/GO-2026-5029 external
https://access.redhat.com/security/cve/CVE-2026-27136 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480757 external
https://www.cve.org/CVERecord?id=CVE-2026-27136 external
https://nvd.nist.gov/vuln/detail/CVE-2026-27136 external
https://go.dev/cl/781685 external
https://go.dev/issue/79575 external
https://pkg.go.dev/vuln/GO-2026-5030 external
https://access.redhat.com/security/cve/CVE-2026-27145 self
https://bugzilla.redhat.com/show_bug.cgi?id=2484207 external
https://www.cve.org/CVERecord?id=CVE-2026-27145 external
https://nvd.nist.gov/vuln/detail/CVE-2026-27145 external
https://go.dev/cl/783621 external
https://go.dev/issue/79694 external
https://groups.google.com/g/golang-announce/c/tKs… external
https://pkg.go.dev/vuln/GO-2026-5037 external
https://access.redhat.com/security/cve/CVE-2026-33818 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515815 external
https://www.cve.org/CVERecord?id=CVE-2026-33818 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33818 external
https://go.dev/cl/814980 external
https://go.dev/issue/80405 external
https://groups.google.com/g/golang-announce/c/94p… external
https://pkg.go.dev/vuln/GO-2026-5972 external
https://access.redhat.com/security/cve/CVE-2026-39820 self
https://bugzilla.redhat.com/show_bug.cgi?id=2467820 external
https://www.cve.org/CVERecord?id=CVE-2026-39820 external
https://nvd.nist.gov/vuln/detail/CVE-2026-39820 external
https://go.dev/cl/759940 external
https://go.dev/issue/78566 external
https://groups.google.com/g/golang-announce/c/qcC… external
https://pkg.go.dev/vuln/GO-2026-4986 external
https://access.redhat.com/security/cve/CVE-2026-39831 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480675 external
https://www.cve.org/CVERecord?id=CVE-2026-39831 external
https://nvd.nist.gov/vuln/detail/CVE-2026-39831 external
https://go.dev/cl/781662 external
https://go.dev/issue/79566 external
https://groups.google.com/g/golang-announce/c/a08… external
https://pkg.go.dev/vuln/GO-2026-5019 external
https://access.redhat.com/security/cve/CVE-2026-41178 self
https://bugzilla.redhat.com/show_bug.cgi?id=2484830 external
https://www.cve.org/CVERecord?id=CVE-2026-41178 external
https://nvd.nist.gov/vuln/detail/CVE-2026-41178 external
https://github.com/open-telemetry/opentelemetry-g… external
https://github.com/open-telemetry/opentelemetry-g… external
https://access.redhat.com/security/cve/CVE-2026-42306 self
https://bugzilla.redhat.com/show_bug.cgi?id=2488484 external
https://www.cve.org/CVERecord?id=CVE-2026-42306 external
https://nvd.nist.gov/vuln/detail/CVE-2026-42306 external
https://github.com/moby/moby/security/advisories/… external
https://access.redhat.com/security/cve/CVE-2026-42499 self
https://bugzilla.redhat.com/show_bug.cgi?id=2467809 external
https://www.cve.org/CVERecord?id=CVE-2026-42499 external
https://nvd.nist.gov/vuln/detail/CVE-2026-42499 external
https://go.dev/cl/771520 external
https://go.dev/issue/78987 external
https://pkg.go.dev/vuln/GO-2026-4977 external
https://access.redhat.com/security/cve/CVE-2026-42504 self
https://bugzilla.redhat.com/show_bug.cgi?id=2484204 external
https://www.cve.org/CVERecord?id=CVE-2026-42504 external
https://nvd.nist.gov/vuln/detail/CVE-2026-42504 external
https://go.dev/cl/774481 external
https://go.dev/issue/79217 external
https://pkg.go.dev/vuln/GO-2026-5038 external
https://access.redhat.com/security/cve/CVE-2026-44740 self
https://bugzilla.redhat.com/show_bug.cgi?id=2483894 external
https://www.cve.org/CVERecord?id=CVE-2026-44740 external
https://nvd.nist.gov/vuln/detail/CVE-2026-44740 external
https://github.com/go-git/go-billy/releases/tag/v5.9.0 external
https://github.com/go-git/go-billy/releases/tag/v… external
https://github.com/go-git/go-billy/security/advis… external
https://access.redhat.com/security/cve/CVE-2026-45819 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515240 external
https://www.cve.org/CVERecord?id=CVE-2026-45819 external
https://nvd.nist.gov/vuln/detail/CVE-2026-45819 external
https://github.com/web-platform-dx/baseline-brows… external
https://github.com/web-platform-dx/baseline-brows… external
https://www.npmjs.com/package/baseline-browser-mapping external
https://access.redhat.com/security/cve/CVE-2026-46597 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480678 external
https://www.cve.org/CVERecord?id=CVE-2026-46597 external
https://nvd.nist.gov/vuln/detail/CVE-2026-46597 external
https://go.dev/cl/781620 external
https://go.dev/issue/79561 external
https://pkg.go.dev/vuln/GO-2026-5013 external
https://access.redhat.com/security/cve/CVE-2026-48050 self
https://www.cve.org/CVERecord?id=CVE-2026-48050 external
https://access.redhat.com/security/cve/CVE-2026-50162 self
https://bugzilla.redhat.com/show_bug.cgi?id=2499694 external
https://www.cve.org/CVERecord?id=CVE-2026-50162 external
https://nvd.nist.gov/vuln/detail/CVE-2026-50162 external
https://github.com/oras-project/oras-go/security/… external
https://access.redhat.com/security/cve/CVE-2026-56853 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515827 external
https://www.cve.org/CVERecord?id=CVE-2026-56853 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56853 external
https://go.dev/cl/795540 external
https://go.dev/issue/80205 external
https://pkg.go.dev/vuln/GO-2026-6089 external
https://access.redhat.com/security/cve/CVE-2026-56858 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515838 external
https://www.cve.org/CVERecord?id=CVE-2026-56858 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56858 external
https://go.dev/cl/807100 external
https://go.dev/issue/80435 external
https://pkg.go.dev/vuln/GO-2026-6091 external
https://access.redhat.com/security/cve/CVE-2026-56859 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515840 external
https://www.cve.org/CVERecord?id=CVE-2026-56859 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56859 external
https://go.dev/cl/803320 external
https://go.dev/issue/80481 external
https://pkg.go.dev/vuln/GO-2026-6088 external
https://access.redhat.com/security/cve/CVE-2026-56860 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515820 external
https://www.cve.org/CVERecord?id=CVE-2026-56860 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56860 external
https://go.dev/cl/803681 external
https://go.dev/issue/80494 external
https://pkg.go.dev/vuln/GO-2026-6218 external
https://access.redhat.com/security/cve/CVE-2026-56862 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515839 external
https://www.cve.org/CVERecord?id=CVE-2026-56862 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56862 external
https://go.dev/cl/804261 external
https://go.dev/issue/80528 external
https://pkg.go.dev/vuln/GO-2026-6090 external
https://access.redhat.com/security/cve/CVE-2026-59869 self
https://bugzilla.redhat.com/show_bug.cgi?id=2498122 external
https://www.cve.org/CVERecord?id=CVE-2026-59869 external
https://nvd.nist.gov/vuln/detail/CVE-2026-59869 external
https://github.com/nodeca/js-yaml/commit/24f13e79… external
https://github.com/nodeca/js-yaml/commit/59423c6f… external
https://github.com/nodeca/js-yaml/releases/tag/3.15.0 external
https://github.com/nodeca/js-yaml/releases/tag/4.3.0 external
https://github.com/nodeca/js-yaml/security/adviso… external
https://access.redhat.com/security/cve/CVE-2026-69152 self
https://bugzilla.redhat.com/show_bug.cgi?id=2510722 external
https://www.cve.org/CVERecord?id=CVE-2026-69152 external
https://nvd.nist.gov/vuln/detail/CVE-2026-69152 external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/s… external
https://access.redhat.com/security/cve/CVE-2026-71556 self
https://bugzilla.redhat.com/show_bug.cgi?id=2512562 external
https://www.cve.org/CVERecord?id=CVE-2026-71556 external
https://nvd.nist.gov/vuln/detail/CVE-2026-71556 external
https://github.com/go-git/go-git/commit/008a78f2d… external
https://github.com/go-git/go-git/commit/661d1c7f1… external
https://github.com/go-git/go-git/releases/tag/v5.19.2 external
https://github.com/go-git/go-git/releases/tag/v6.… external
https://github.com/go-git/go-git/security/advisor… external
https://access.redhat.com/security/cve/CVE-2026-73088 self
https://bugzilla.redhat.com/show_bug.cgi?id=2514177 external
https://www.cve.org/CVERecord?id=CVE-2026-73088 external
https://nvd.nist.gov/vuln/detail/CVE-2026-73088 external
https://github.com/browserslist/browserslist/comm… external
https://github.com/browserslist/browserslist/rele… external
https://github.com/browserslist/browserslist/secu… external
https://access.redhat.com/security/cve/CVE-2026-73089 self
https://bugzilla.redhat.com/show_bug.cgi?id=2514195 external
https://www.cve.org/CVERecord?id=CVE-2026-73089 external
https://nvd.nist.gov/vuln/detail/CVE-2026-73089 external
https://github.com/browserslist/browserslist/comm… external
https://github.com/browserslist/browserslist/secu… external
https://access.redhat.com/security/cve/CVE-2026-73643 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515531 external
https://www.cve.org/CVERecord?id=CVE-2026-73643 external
https://nvd.nist.gov/vuln/detail/CVE-2026-73643 external
https://github.com/nodeca/js-yaml/commit/3e5240f9… external
https://github.com/nodeca/js-yaml/security/adviso… external
https://access.redhat.com/security/cve/CVE-2026-75899 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521778 external
https://www.cve.org/CVERecord?id=CVE-2026-75899 external
https://nvd.nist.gov/vuln/detail/CVE-2026-75899 external
https://cna.openjsf.org/security-advisories.html external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-75931 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521777 external
https://www.cve.org/CVERecord?id=CVE-2026-75931 external
https://nvd.nist.gov/vuln/detail/CVE-2026-75931 external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-75975 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521779 external
https://www.cve.org/CVERecord?id=CVE-2026-75975 external
https://nvd.nist.gov/vuln/detail/CVE-2026-75975 external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-76172 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521798 external
https://www.cve.org/CVERecord?id=CVE-2026-76172 external
https://nvd.nist.gov/vuln/detail/CVE-2026-76172 external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-81521 self
https://bugzilla.redhat.com/show_bug.cgi?id=2525215 external
https://www.cve.org/CVERecord?id=CVE-2026-81521 external
https://nvd.nist.gov/vuln/detail/CVE-2026-81521 external
https://pkg.go.dev/go.mongodb.org/mongo-driver/v2… external
https://access.redhat.com/security/cve/CVE-2026-84292 self
https://bugzilla.redhat.com/show_bug.cgi?id=2527747 external
https://www.cve.org/CVERecord?id=CVE-2026-84292 external
https://nvd.nist.gov/vuln/detail/CVE-2026-84292 external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-84375 self
https://bugzilla.redhat.com/show_bug.cgi?id=2527118 external
https://www.cve.org/CVERecord?id=CVE-2026-84375 external
https://nvd.nist.gov/vuln/detail/CVE-2026-84375 external
https://github.com/nodeca/js-yaml/commit/3485bc06… external
https://github.com/nodeca/js-yaml/commit/6a8e05f9… external
https://github.com/nodeca/js-yaml/commit/d90b6612… external
https://github.com/nodeca/js-yaml/pull/797 external
https://github.com/nodeca/js-yaml/releases/tag/3.15.2 external
https://github.com/nodeca/js-yaml/releases/tag/4.3.2 external
https://github.com/nodeca/js-yaml/security/adviso… external
https://access.redhat.com/security/cve/CVE-2026-84394 self
https://bugzilla.redhat.com/show_bug.cgi?id=2527756 external
https://www.cve.org/CVERecord?id=CVE-2026-84394 external
https://nvd.nist.gov/vuln/detail/CVE-2026-84394 external
https://github.com/fastify/fast-uri/security/advi… external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Edge Manager Version 1.1.4 Security Update",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused\nmanagement of edge devices and applications. It supports image-mode RHEL and\ncontainer workloads that run on Podman/Docker or Kubernetes.\n\nRHEM is now available as a standalone feature, providing greater flexibility for\nedge deployments. In addition to the standalone version, RHEM continues to be\noffered as a plugin for the following platforms:\n\n* Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge\ndevices.\n* Red Hat Ansible Automation Platform (AAP): Integrates edge management with\nAnsible automation.\n\nThis integration enables organizations to optimize the management and\norchestration of their fleets of edge devices; whether its thousands of\ndispersed retail point-of-sale systems or industrial machinery on remote factory\nfloors.\n\nValue for customers and partners:\n\n* This solution not only helps customers manage thousands of devices but helps\nscale operations.\n* To manage large-scale deployments, customers need to be able to integrate with\ntheir existing management systems, support remote configuration and over-the-air\nupdates, and collect telemetry data for advanced analytics.\n* Red Hat Edge Manager offers a simple and security-focused lifecycle\nmanagement, from onboarding to decommissioning of edge devices.\n\nThis complete end-to-end solution empowers organizations to gain the most value\nfrom the fleets of devices that generate data, all from a centralized location.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:68044",
        "url": "https://access.redhat.com/errata/RHSA-2026:68044"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-13149",
        "url": "https://access.redhat.com/security/cve/CVE-2026-13149"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
        "url": "https://access.redhat.com/security/cve/CVE-2026-25681"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
        "url": "https://access.redhat.com/security/cve/CVE-2026-27136"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
        "url": "https://access.redhat.com/security/cve/CVE-2026-27145"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33818",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39820"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39831"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41178",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41178"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42306",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42306"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42499"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42504"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-44740",
        "url": "https://access.redhat.com/security/cve/CVE-2026-44740"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-45819",
        "url": "https://access.redhat.com/security/cve/CVE-2026-45819"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
        "url": "https://access.redhat.com/security/cve/CVE-2026-46597"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-48050",
        "url": "https://access.redhat.com/security/cve/CVE-2026-48050"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-50162",
        "url": "https://access.redhat.com/security/cve/CVE-2026-50162"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56853",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56853"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56858",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56858"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56859",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56859"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56860",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56860"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56862",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56862"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59869",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59869"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-6377",
        "url": "https://access.redhat.com/security/cve/CVE-2026-6377"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-69152",
        "url": "https://access.redhat.com/security/cve/CVE-2026-69152"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-71556",
        "url": "https://access.redhat.com/security/cve/CVE-2026-71556"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-73088",
        "url": "https://access.redhat.com/security/cve/CVE-2026-73088"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-73089",
        "url": "https://access.redhat.com/security/cve/CVE-2026-73089"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-73643",
        "url": "https://access.redhat.com/security/cve/CVE-2026-73643"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-75899",
        "url": "https://access.redhat.com/security/cve/CVE-2026-75899"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-75931",
        "url": "https://access.redhat.com/security/cve/CVE-2026-75931"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-75975",
        "url": "https://access.redhat.com/security/cve/CVE-2026-75975"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-76172",
        "url": "https://access.redhat.com/security/cve/CVE-2026-76172"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-81521",
        "url": "https://access.redhat.com/security/cve/CVE-2026-81521"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-84292",
        "url": "https://access.redhat.com/security/cve/CVE-2026-84292"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-84375",
        "url": "https://access.redhat.com/security/cve/CVE-2026-84375"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-84394",
        "url": "https://access.redhat.com/security/cve/CVE-2026-84394"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro",
        "url": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro",
        "url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68044.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.4 Security Update",
    "tracking": {
      "current_release_date": "2026-09-22T14:01:25+00:00",
      "generator": {
        "date": "2026-09-22T14:01:25+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.0"
        }
      },
      "id": "RHSA-2026:68044",
      "initial_release_date": "2026-09-16T12:48:53+00:00",
      "revision_history": [
        {
          "date": "2026-09-16T12:48:53+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-16T12:49:16+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-22T14:01:25+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Edge Manager 1.1",
                "product": {
                  "name": "Red Hat Edge Manager 1.1",
                  "product_id": "Red Hat Edge Manager 1.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:edge_manager:1.1::el10"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Edge Manager"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-alert-exporter-rhel10@sha256%3A113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-alert-exporter-rhel10\u0026tag=1789485396"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-alertmanager-proxy-rhel10@sha256%3Ae4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10\u0026tag=1789486842"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-api-rhel10@sha256%3A15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-api-rhel10\u0026tag=1789485939"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-cli-artifacts-rhel10@sha256%3A9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10\u0026tag=1789488001"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-db-setup-rhel10@sha256%3Abf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-db-setup-rhel10\u0026tag=1789487240"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-imagebuilder-api-rhel10@sha256%3Ac1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10\u0026tag=1789486040"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-imagebuilder-worker-rhel10@sha256%3A8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10\u0026tag=1789486782"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-pam-issuer-rhel10@sha256%3A7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-pam-issuer-rhel10\u0026tag=1789487151"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-periodic-rhel10@sha256%3Aff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-periodic-rhel10\u0026tag=1789485633"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-telemetry-gateway-rhel10@sha256%3Ad0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10\u0026tag=1789486686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-ui-ocp-rhel10@sha256%3Aa5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-ocp-rhel10\u0026tag=1789486226"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-ui-rhel10@sha256%3Af69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-rhel10\u0026tag=1789486181"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-userinfo-proxy-rhel10@sha256%3A9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10\u0026tag=1789487947"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-worker-rhel10@sha256%3Aa832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-worker-rhel10\u0026tag=1789486071"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-alert-exporter-rhel10@sha256%3A656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-alert-exporter-rhel10\u0026tag=1789485396"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-alertmanager-proxy-rhel10@sha256%3A91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10\u0026tag=1789486842"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-api-rhel10@sha256%3Ae1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-api-rhel10\u0026tag=1789485939"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-cli-artifacts-rhel10@sha256%3A8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10\u0026tag=1789488001"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-db-setup-rhel10@sha256%3Adf00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-db-setup-rhel10\u0026tag=1789487240"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-imagebuilder-api-rhel10@sha256%3A55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10\u0026tag=1789486040"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-imagebuilder-worker-rhel10@sha256%3Afbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10\u0026tag=1789486782"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-pam-issuer-rhel10@sha256%3Ae0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-pam-issuer-rhel10\u0026tag=1789487151"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-periodic-rhel10@sha256%3A1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-periodic-rhel10\u0026tag=1789485633"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-telemetry-gateway-rhel10@sha256%3A30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10\u0026tag=1789486686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-ui-ocp-rhel10@sha256%3Aea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-ocp-rhel10\u0026tag=1789486226"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-ui-rhel10@sha256%3A7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-rhel10\u0026tag=1789486181"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-userinfo-proxy-rhel10@sha256%3A63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10\u0026tag=1789487947"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-worker-rhel10@sha256%3A14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-worker-rhel10\u0026tag=1789486071"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-6377",
      "discovery_date": "2026-09-07T14:32:25.132288+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ]
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027) vulnerability in Next4Biz Information Technologies Inc. CSM (Customer Service Management) allows Path Traversal.\n\nThis issue affects CSM (Customer Service Management): from 6.8.9 before 8.0.3.",
          "title": "Vulnerability description"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-6377"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-6377",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-6377"
        }
      ],
      "release_date": "2026-09-07T14:15:48.553000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "CSM: Next4Biz CSM: Information disclosure via path traversal vulnerability"
    },
    {
      "cve": "CVE-2026-13149",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "discovery_date": "2026-06-30T10:00:59.843854+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2494813"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in brace-expansion, a widely-used npm package for expanding brace sequences. The expand() function exhibits exponential-time complexity when processing consecutive non-expanding brace groups. An attacker who can supply crafted input to expand(), directly or transitively via minimatch or glob, can cause significant CPU consumption and event-loop blocking, resulting in denial of service. The max option does not mitigate this issue, as it bounds the output size rather than the recursion work.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-13149"
        },
        {
          "category": "external",
          "summary": "RHBZ#2494813",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494813"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-13149",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-13149"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754",
          "url": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754"
        },
        {
          "category": "external",
          "summary": "https://www.npmjs.com/package/brace-expansion",
          "url": "https://www.npmjs.com/package/brace-expansion"
        }
      ],
      "release_date": "2026-06-30T08:30:34.502000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        },
        {
          "category": "workaround",
          "details": "There is no practical mitigation for this vulnerability. The brace-expansion package is typically a transitive dependency pulled in via minimatch and glob, making it difficult to isolate. Users should upgrade to a fixed version of brace-expansion when one becomes available.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity"
    },
    {
      "cve": "CVE-2026-25681",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-22T16:01:08.177603+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480761"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480761",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781703",
          "url": "https://go.dev/cl/781703"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79574",
          "url": "https://go.dev/issue/79574"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5029",
          "url": "https://pkg.go.dev/vuln/GO-2026-5029"
        }
      ],
      "release_date": "2026-05-22T15:01:21.975000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        },
        {
          "category": "workaround",
          "details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
    },
    {
      "cve": "CVE-2026-27136",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-22T16:00:56.609820+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480757"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480757",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781685",
          "url": "https://go.dev/cl/781685"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79575",
          "url": "https://go.dev/issue/79575"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5030",
          "url": "https://pkg.go.dev/vuln/GO-2026-5030"
        }
      ],
      "release_date": "2026-05-22T15:01:22.111000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
    },
    {
      "cve": "CVE-2026-27145",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-06-02T23:01:08.992540+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484207"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484207",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/783621",
          "url": "https://go.dev/cl/783621"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79694",
          "url": "https://go.dev/issue/79694"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
          "url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5037",
          "url": "https://pkg.go.dev/vuln/GO-2026-5037"
        }
      ],
      "release_date": "2026-06-02T22:01:36.954000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        },
        {
          "category": "workaround",
          "details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
    },
    {
      "cve": "CVE-2026-33818",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T22:12:37.151735+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515815"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go encoding/asn1 package, as it can be triggered remotely without authentication. An attacker can provide a malformed ASN.1 structure, causing excessive recursion during unmarshalling and leading to stack exhaustion, which can render the service unavailable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515815",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515815"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33818",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/814980",
          "url": "https://go.dev/cl/814980"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80405",
          "url": "https://go.dev/issue/80405"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5972",
          "url": "https://pkg.go.dev/vuln/GO-2026-5972"
        }
      ],
      "release_date": "2026-08-13T21:58:52.821000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal"
    },
    {
      "cve": "CVE-2026-39820",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-05-07T20:01:27.800929+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467820"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39820"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467820",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/759940",
          "url": "https://go.dev/cl/759940"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78566",
          "url": "https://go.dev/issue/78566"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
          "url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4986",
          "url": "https://pkg.go.dev/vuln/GO-2026-4986"
        }
      ],
      "release_date": "2026-05-07T19:41:19.854000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
    },
    {
      "cve": "CVE-2026-39831",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-05-22T04:01:12.861178+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480675"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39831"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480675",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781662",
          "url": "https://go.dev/cl/781662"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79566",
          "url": "https://go.dev/issue/79566"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5019",
          "url": "https://pkg.go.dev/vuln/GO-2026-5019"
        }
      ],
      "release_date": "2026-05-22T02:31:27.436000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
    },
    {
      "cve": "CVE-2026-41178",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-06-04T16:01:10.300537+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484830"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in OpenTelemetry-Go, affecting versions 1.41.0 and 1.43.0. An attacker can exploit this flaw by sending oversized baggage headers, causing the `Parse` function to process invalid inputs and log errors, which can lead to resource exhaustion and service disruption in Red Hat products utilizing these affected OpenTelemetry-Go versions. The impact is considered Important due to the potential for remote, unauthenticated denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484830",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484830"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41178",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "https://github.com/open-telemetry/opentelemetry-go/pull/7880",
          "url": "https://github.com/open-telemetry/opentelemetry-go/pull/7880"
        },
        {
          "category": "external",
          "summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835",
          "url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835"
        }
      ],
      "release_date": "2026-06-04T14:38:23.707000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers"
    },
    {
      "cve": "CVE-2026-42306",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "discovery_date": "2026-06-12T19:01:10.843543+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2488484"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Moby container framework. A race condition occurs during the `docker cp` mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could overwrite host files, potentially leading to data corruption or a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw in the Moby container framework where a race condition during `docker cp` mount setup could allow a malicious container to overwrite arbitrary host files. Exploitation requires an attacker to have control over a running container, which could lead to data corruption or denial of service on the host system.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42306"
        },
        {
          "category": "external",
          "summary": "RHBZ#2488484",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488484"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42306",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42306"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42306",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42306"
        },
        {
          "category": "external",
          "summary": "https://github.com/moby/moby/security/advisories/GHSA-rg2x-37c3-w2rh",
          "url": "https://github.com/moby/moby/security/advisories/GHSA-rg2x-37c3-w2rh"
        }
      ],
      "release_date": "2026-06-12T18:09:22.188000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup"
    },
    {
      "cve": "CVE-2026-42499",
      "cwe": {
        "id": "CWE-1046",
        "name": "Creation of Immutable Text Using String Concatenation"
      },
      "discovery_date": "2026-05-07T20:00:51.685602+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467809"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42499"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467809",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/771520",
          "url": "https://go.dev/cl/771520"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78987",
          "url": "https://go.dev/issue/78987"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
          "url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4977",
          "url": "https://pkg.go.dev/vuln/GO-2026-4977"
        }
      ],
      "release_date": "2026-05-07T19:41:18.615000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
    },
    {
      "cve": "CVE-2026-42504",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-06-02T23:01:00.320527+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484204"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42504"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484204",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/774481",
          "url": "https://go.dev/cl/774481"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79217",
          "url": "https://go.dev/issue/79217"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
          "url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5038",
          "url": "https://pkg.go.dev/vuln/GO-2026-5038"
        }
      ],
      "release_date": "2026-06-02T22:01:37.219000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
    },
    {
      "cve": "CVE-2026-44740",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-06-01T17:01:53.685793+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2483894"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is rated as an Important severity issue. The `go-billy` library, a Go filesystem abstraction, is vulnerable to a denial of service when processing crafted or malformed input, such as untrusted repository data or filesystem structures. Insufficient validation and missing safety mechanisms can lead to panics, infinite loops, or excessive resource consumption, potentially impacting the availability of applications that rely on this library.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44740"
        },
        {
          "category": "external",
          "summary": "RHBZ#2483894",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483894"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44740",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44740"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-billy/releases/tag/v5.9.0",
          "url": "https://github.com/go-git/go-billy/releases/tag/v5.9.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1",
          "url": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6",
          "url": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6"
        }
      ],
      "release_date": "2026-06-01T16:04:50.358000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        },
        {
          "category": "workaround",
          "details": "To mitigate the issue, we suggest upgrading to versions 5.9.0+ or 6.0.0-alpha.1+",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation"
    },
    {
      "cve": "CVE-2026-45819",
      "cwe": {
        "id": "CWE-617",
        "name": "Reachable Assertion"
      },
      "discovery_date": "2026-08-13T11:30:54.323606+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515240"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in baseline-browser-mapping. This vulnerability allows an attacker to cause a denial of service by providing invalid or conflicting input parameters. The affected component improperly terminates the process instead of handling the input error gracefully, leading to immediate service disruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "baseline-browser-mapping: baseline-browser-mapping: Denial of Service via improper input handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This flaw in the \u0027baseline-browser-mapping\u0027 library can result in a denial of service. Applications utilizing this library may unexpectedly terminate if they process invalid or conflicting input parameters, potentially disrupting services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-45819"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515240",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515240"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-45819",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-45819"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45819",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45819"
        },
        {
          "category": "external",
          "summary": "https://github.com/web-platform-dx/baseline-browser-mapping/blob/b7881aa61c8a057e24468ab5ee18c5ecedbbf691/src/index.ts#L142",
          "url": "https://github.com/web-platform-dx/baseline-browser-mapping/blob/b7881aa61c8a057e24468ab5ee18c5ecedbbf691/src/index.ts#L142"
        },
        {
          "category": "external",
          "summary": "https://github.com/web-platform-dx/baseline-browser-mapping/pull/137/changes#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519",
          "url": "https://github.com/web-platform-dx/baseline-browser-mapping/pull/137/changes#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519"
        },
        {
          "category": "external",
          "summary": "https://www.npmjs.com/package/baseline-browser-mapping",
          "url": "https://www.npmjs.com/package/baseline-browser-mapping"
        }
      ],
      "release_date": "2026-08-13T11:03:42.504000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "baseline-browser-mapping: baseline-browser-mapping: Denial of Service via improper input handling"
    },
    {
      "cve": "CVE-2026-46597",
      "cwe": {
        "id": "CWE-681",
        "name": "Incorrect Conversion between Numeric Types"
      },
      "discovery_date": "2026-05-22T04:01:21.721980+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480678"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46597"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480678",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781620",
          "url": "https://go.dev/cl/781620"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79561",
          "url": "https://go.dev/issue/79561"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5013",
          "url": "https://pkg.go.dev/vuln/GO-2026-5013"
        }
      ],
      "release_date": "2026-05-22T02:31:26.754000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
    },
    {
      "cve": "CVE-2026-48050",
      "discovery_date": "2026-08-21T22:51:05.227994+00:00",
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Arc. This vulnerability allows a remote unauthenticated attacker to access Go debug pprof endpoints due to improper authentication bypass. Successful exploitation can lead to the disclosure of sensitive runtime state information and enable a CPU-burn Denial of Service (DoS) attack, impacting the availability and confidentiality of the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security has determined that this flaw does not affect any currently supported Red Hat products. The vulnerability resides in the Arc component (github.com/basekick-labs/arc), which is not shipped in, bundled with, or included as a dependency of any Red Hat offering. Because the affected code is not present in Red Hat products, they are not vulnerable to this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-48050"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-48050",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-48050"
        }
      ],
      "release_date": "2026-08-21T22:40:12.771000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        },
        {
          "category": "workaround",
          "details": "No mitigation is required. Red Hat products do not ship or include the affected Arc component (github.com/basekick-labs/arc), so they are not exposed to this vulnerability.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/http/pprof: github.com/basekick-labs/arc: Arc: Information disclosure and Denial of Service via unauthenticated debug endpoints"
    },
    {
      "cve": "CVE-2026-50162",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-07-01T21:35:45+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2499694"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in oras-go. The file content store, intended to confine writes to a specified working directory, does not properly account for symbolic link (symlink) traversal. A remote attacker, by providing a specially crafted blob title, could exploit this vulnerability to create files outside the intended working directory. This filesystem boundary bypass allows for arbitrary file creation, potentially leading to unauthorized data modification or system compromise depending on the runtime environment.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "oras-go: oras-go: File store write outside working directory via symlink traversal",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-50162"
        },
        {
          "category": "external",
          "summary": "RHBZ#2499694",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499694"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-50162",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-50162"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50162",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50162"
        },
        {
          "category": "external",
          "summary": "https://github.com/oras-project/oras-go/security/advisories/GHSA-8xwf-rjm4-xvhv",
          "url": "https://github.com/oras-project/oras-go/security/advisories/GHSA-8xwf-rjm4-xvhv"
        }
      ],
      "release_date": "2026-07-01T21:35:45+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "oras-go: oras-go: File store write outside working directory via symlink traversal"
    },
    {
      "cve": "CVE-2026-56853",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-13T22:14:53.561638+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515827"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: Unencrypted HTTP/2 servers are susceptible to a denial of service due to improper handling of ReadHeaderTimeout during the client preface reading phase. This can lead to resource exhaustion and service unavailability in affected Red Hat products configured to support unencrypted HTTP/2.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515827",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515827"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56853",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/795540",
          "url": "https://go.dev/cl/795540"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80205",
          "url": "https://go.dev/issue/80205"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6089",
          "url": "https://pkg.go.dev/vuln/GO-2026-6089"
        }
      ],
      "release_date": "2026-08-13T21:58:53.092000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service"
    },
    {
      "cve": "CVE-2026-56858",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-08-13T22:16:32.034590+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515838"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash (\u0027/\u0027), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user\u0027s browser, potentially compromising user data or actions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important cross-site scripting (XSS) vulnerability in the Go `html/template` package. Applications utilizing this package to render untrusted input are susceptible to arbitrary content injection due to a flaw in how pathological inputs are handled, potentially leading to client-side script execution.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515838",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515838"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56858",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/807100",
          "url": "https://go.dev/cl/807100"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80435",
          "url": "https://go.dev/issue/80435"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6091",
          "url": "https://pkg.go.dev/vuln/GO-2026-6091"
        }
      ],
      "release_date": "2026-08-13T21:58:53.354000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input"
    },
    {
      "cve": "CVE-2026-56859",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T22:16:52.493058+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515840"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important denial of service flaw affects applications utilizing the Go `encoding/xml` package. This vulnerability arises from an issue in XML decoding where a recursion depth counter fails to reset, potentially leading to stack exhaustion when processing malicious XML input.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515840",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515840"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56859",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803320",
          "url": "https://go.dev/cl/803320"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80481",
          "url": "https://go.dev/issue/80481"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6088",
          "url": "https://pkg.go.dev/vuln/GO-2026-6088"
        }
      ],
      "release_date": "2026-08-13T21:58:52.959000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue"
    },
    {
      "cve": "CVE-2026-56860",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-13T22:13:18.319384+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515820"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory (\u0027..\u0027) segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go `net/url` package. Applications built with Go that process untrusted URLs containing parent directory segments (\u0027..\u0027) may be vulnerable to excessive resource consumption due to quadratic time complexity in path resolution. This can lead to a denial of service, impacting the availability of affected services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515820",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515820"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56860",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803681",
          "url": "https://go.dev/cl/803681"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80494",
          "url": "https://go.dev/issue/80494"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6218",
          "url": "https://pkg.go.dev/vuln/GO-2026-6218"
        }
      ],
      "release_date": "2026-08-13T21:58:53.731000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution"
    },
    {
      "cve": "CVE-2026-56862",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-08-13T22:16:41.928450+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515839"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `golang` `crypto/tls` package. A remote, unauthenticated attacker can exploit this flaw by continuously sending `KeyUpdate` messages during a TLS handshake, forcing the server to perform indefinite key derivation operations. This resource exhaustion can lead to a denial of service for applications and services in Red Hat products that use the affected `crypto/tls` library and are exposed to untrusted network clients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515839",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515839"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56862",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/804261",
          "url": "https://go.dev/cl/804261"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80528",
          "url": "https://go.dev/issue/80528"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6090",
          "url": "https://pkg.go.dev/vuln/GO-2026-6090"
        }
      ],
      "release_date": "2026-08-13T21:58:53.216000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages"
    },
    {
      "cve": "CVE-2026-59869",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-07-08T16:01:38.408322+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498122"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "js-yaml: js-yaml: Denial of Service via crafted YAML documents",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important. Red Hat products utilizing `js-yaml` to process untrusted YAML input are susceptible to a denial of service, as a remote attacker can provide a crafted document that consumes excessive CPU resources. This is considered Important due to the potential for service disruption without requiring authentication or complex attack vectors.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59869"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498122",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498122"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59869",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59869"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7",
          "url": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4",
          "url": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m",
          "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"
        }
      ],
      "release_date": "2026-07-08T15:15:54.675000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        },
        {
          "category": "workaround",
          "details": "To reduce exposure, restrict the processing of untrusted YAML documents by applications that rely on `js-yaml`. Implement robust input validation and sanitization for all YAML data originating from external or untrusted sources. Consider limiting network access to services that parse YAML content to trusted networks or clients through appropriate firewall configurations.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "js-yaml: js-yaml: Denial of Service via crafted YAML documents"
    },
    {
      "cve": "CVE-2026-69152",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-03T18:01:13.566423+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510722"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Any applications that pass user-controlled input to the `expand()` function are vulnerable to this issue. This flaw can result in an excessive consumption of memory that eventually terminates the process or blocks the event loop, both causing a denial of service. As this vulnerability allows a remote attacker to cause a denial of service, it has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510722",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510722"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-69152",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69152",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d",
          "url": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac",
          "url": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf",
          "url": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031",
          "url": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895",
          "url": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895"
        }
      ],
      "release_date": "2026-08-03T16:33:36.324000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, do not pass untrusted input to the expand() function.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation"
    },
    {
      "cve": "CVE-2026-71556",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "discovery_date": "2026-08-07T16:51:14.251077+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2512562"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in go-git, an extensible Git implementation library. Worktree operations, such as checkout, status, and add, resolve symbolic links within the working tree without proper boundary confinement. This allows a remote attacker to craft a malicious repository containing a symlink, which, when cloned and its worktree operations are used, can lead to reading from or writing to arbitrary files outside the intended working directory. This could result in information disclosure or arbitrary file modification.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "go-git is a pure-Go implementation of Git. During worktree operations (checkout, status, add), go-git resolves symbolic links without confining resolution to the worktree boundary, so a maliciously crafted repository containing a symlink can cause a consuming application to read from or write to files outside the intended working directory when that repository is cloned and its worktree operations are used. Exploitation requires the application to clone an attacker-controlled repository and then perform worktree operations against it; applications that only process trusted repositories are not exposed. Red Hat rates the impact of this flaw as Important.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-71556"
        },
        {
          "category": "external",
          "summary": "RHBZ#2512562",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512562"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-71556",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-71556"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-71556",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-71556"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/commit/008a78f2dd86f52544ddff8b8e8ddeecdf3f7aab",
          "url": "https://github.com/go-git/go-git/commit/008a78f2dd86f52544ddff8b8e8ddeecdf3f7aab"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/commit/661d1c7f101d34e002a3cfcf8dbea5b7421d07ac",
          "url": "https://github.com/go-git/go-git/commit/661d1c7f101d34e002a3cfcf8dbea5b7421d07ac"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/releases/tag/v5.19.2",
          "url": "https://github.com/go-git/go-git/releases/tag/v5.19.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/releases/tag/v6.0.0-alpha.5",
          "url": "https://github.com/go-git/go-git/releases/tag/v6.0.0-alpha.5"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/security/advisories/GHSA-hc8v-wwc9-vgxm",
          "url": "https://github.com/go-git/go-git/security/advisories/GHSA-hc8v-wwc9-vgxm"
        }
      ],
      "release_date": "2026-08-07T16:37:40.058000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        },
        {
          "category": "workaround",
          "details": "To reduce the risk of exploitation, do not clone or run worktree operations (checkout, status, add) on Git repositories originating from untrusted or attacker-controllable sources using an affected version of go-git. The issue is resolved by updating to go-git 5.19.2 or 6.0.0-alpha.5 (or later).",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution"
    },
    {
      "cve": "CVE-2026-73088",
      "cwe": {
        "id": "CWE-915",
        "name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
      },
      "discovery_date": "2026-08-11T17:11:53.228719+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2514177"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Browserslist, a tool for sharing browser and Node.js versions. An attacker could provide specially crafted statistics data, which the tool processes without proper validation. This improper handling of untrusted data can lead to prototype pollution, potentially causing the application to crash and resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "browserslist: Browserslist: Prototype pollution leading to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important vulnerability. The browserslist package, a front-end development tool, is vulnerable to prototype pollution when processing untrusted statistics data. This flaw can lead to a denial of service, as malicious input can crash applications that use the affected library. The impact is considered Important due to the potential for remote exploitation without authentication or user interaction, directly affecting service availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73088"
        },
        {
          "category": "external",
          "summary": "RHBZ#2514177",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514177"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73088",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73088"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73088",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73088"
        },
        {
          "category": "external",
          "summary": "https://github.com/browserslist/browserslist/commit/f9914ad9effc865ccc27d816255625890b31ca51",
          "url": "https://github.com/browserslist/browserslist/commit/f9914ad9effc865ccc27d816255625890b31ca51"
        },
        {
          "category": "external",
          "summary": "https://github.com/browserslist/browserslist/releases/tag/4.28.7",
          "url": "https://github.com/browserslist/browserslist/releases/tag/4.28.7"
        },
        {
          "category": "external",
          "summary": "https://github.com/browserslist/browserslist/security/advisories/GHSA-73wf-gq98-2v4g",
          "url": "https://github.com/browserslist/browserslist/security/advisories/GHSA-73wf-gq98-2v4g"
        }
      ],
      "release_date": "2026-08-11T17:00:05.869000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        },
        {
          "category": "workaround",
          "details": "To reduce exposure, ensure that the `browserslist` tool processes only trusted `browserslist-stats.json`, `opts.stats`, and CLI `--stats` data. Avoid using the tool with untrusted input sources in development or build environments. If `browserslist` is integrated into automated pipelines, validate all input data originates from trusted sources.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "browserslist: Browserslist: Prototype pollution leading to denial of service"
    },
    {
      "cve": "CVE-2026-73089",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-11T17:12:48.012036+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2514195"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Browserslist, a configuration tool for front-end development. An attacker can exploit this vulnerability by influencing repeated query values, leading to unbounded memory growth. This issue can cause the application to consume excessive memory, resulting in an out-of-memory process crash and a Denial of Service (DoS) for affected systems.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "browserslist: Browserslist: Denial of Service via unbounded memory growth from distinct query results",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `browserslist` library, which is used across several Red Hat products and services. The flaw allows an attacker to trigger unbounded memory growth by influencing query values, potentially leading to an out-of-memory crash and service unavailability. This is considered Important due to the potential for remote exploitation and significant impact on service stability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73089"
        },
        {
          "category": "external",
          "summary": "RHBZ#2514195",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514195"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73089",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73089"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73089",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73089"
        },
        {
          "category": "external",
          "summary": "https://github.com/browserslist/browserslist/commit/f2931a3ff2a3a31abf84ef01a7400b270aad6405",
          "url": "https://github.com/browserslist/browserslist/commit/f2931a3ff2a3a31abf84ef01a7400b270aad6405"
        },
        {
          "category": "external",
          "summary": "https://github.com/browserslist/browserslist/releases/tag/4.28.7",
          "url": "https://github.com/browserslist/browserslist/releases/tag/4.28.7"
        },
        {
          "category": "external",
          "summary": "https://github.com/browserslist/browserslist/security/advisories/GHSA-c83g-rgw3-j3cx",
          "url": "https://github.com/browserslist/browserslist/security/advisories/GHSA-c83g-rgw3-j3cx"
        }
      ],
      "release_date": "2026-08-11T17:05:38.760000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "browserslist: Browserslist: Denial of Service via unbounded memory growth from distinct query results"
    },
    {
      "cve": "CVE-2026-73643",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "discovery_date": "2026-08-13T18:11:25.926202+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515531"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in js-yaml, a JavaScript YAML parser. A remote attacker could exploit this vulnerability by providing specially crafted YAML input containing nested flow collections. This can lead to exponential parsing time when the application processes untrusted input, consuming excessive CPU resources. This resource exhaustion can block the Node.js event loop and cause a Denial of Service (DoS) for the affected process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "js-yaml: js-yaml: Denial of Service via exponential parsing in flow collections",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial-of-service flaw in the `js-yaml` library, where processing specially crafted YAML input can lead to exponential parsing time. This can cause applications utilizing affected versions of `js-yaml` within Red Hat products to consume excessive CPU resources, potentially blocking the Node.js event loop and leading to service unavailability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73643"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515531",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515531"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73643",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73643"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73643",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73643"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/3e5240f9cbe645ce5afb58524954a13c8539c853",
          "url": "https://github.com/nodeca/js-yaml/commit/3e5240f9cbe645ce5afb58524954a13c8539c853"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-pm4m-ph32-ghv5",
          "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-pm4m-ph32-ghv5"
        }
      ],
      "release_date": "2026-08-13T17:47:30.404000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict applications from processing untrusted YAML input with affected versions of the `js-yaml` library. Implement strict input validation to ensure that only trusted and well-formed YAML data is processed. If the application is exposed to external, untrusted sources, consider isolating the application or implementing additional resource limits to prevent complete service disruption.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "js-yaml: js-yaml: Denial of Service via exponential parsing in flow collections"
    },
    {
      "cve": "CVE-2026-75899",
      "cwe": {
        "id": "CWE-140",
        "name": "Improper Neutralization of Delimiters"
      },
      "discovery_date": "2026-08-24T09:51:05.559475+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521778"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri, a URI parser for Node.js. The component incorrectly decodes percent escapes in a hostname twice during URI parsing and authority recomposition. This double decoding can allow a remote attacker to manipulate a URI to point to a different network destination, such as a loopback address. This vulnerability can lead to Server-Side Request Forgery (SSRF) and bypass host-based security policies.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in the `fast-uri` library, used by applications for URI parsing, allows for Server-Side Request Forgery (SSRF) and host-policy bypass. By crafting a doubly percent-encoded hostname in an untrusted HTTP-family URI, an attacker could redirect internal application requests to arbitrary network destinations, potentially bypassing security controls and accessing internal services. This risk is present in Red Hat products that process untrusted URIs using affected versions of `fast-uri`.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-75899"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521778",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521778"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-75899",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-75899"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-75899",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75899"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-fph4-wmhf-6fwf",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-fph4-wmhf-6fwf"
        }
      ],
      "release_date": "2026-08-24T09:40:19.801000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding"
    },
    {
      "cve": "CVE-2026-75931",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2026-08-24T09:51:02.191062+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521777"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri, a URI parser for Node.js. This vulnerability arises because the parser fails to consistently convert internationalized domain names (IDN) to their standard ASCII form when processing scheme-relative references. This inconsistency can lead to host confusion, where an application might validate a URI against a security policy using one hostname, but then resolve to a different, potentially malicious, hostname. This discrepancy could allow an attacker to bypass security policies and access unauthorized resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Host confusion via skipped IDN canonicalization",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-75931"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521777",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521777"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-75931",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-75931"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-75931",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75931"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8"
        }
      ],
      "release_date": "2026-08-24T09:30:04.212000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Host confusion via skipped IDN canonicalization"
    },
    {
      "cve": "CVE-2026-75975",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2026-08-24T10:11:05.356309+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521779"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri, a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not fully validate the IPv6 grammar, allowing invalid trailing text in an authority to be silently discarded. This can lead to a malformed, attacker-controlled host being normalized into a different, valid IPv6 destination, such as a local or private IPv6 target. An application normalizing untrusted URLs before outbound requests, redirects, or proxy routing could be redirected, resulting in a server-side request forgery (SSRF) and address-policy bypass.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-75975"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521779",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521779"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-75975",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-75975"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-75975",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75975"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-f65p-4m7j-42xc",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-f65p-4m7j-42xc"
        }
      ],
      "release_date": "2026-08-24T09:58:07.698000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization"
    },
    {
      "cve": "CVE-2026-76172",
      "cwe": {
        "id": "CWE-76",
        "name": "Improper Neutralization of Equivalent Special Elements"
      },
      "discovery_date": "2026-08-24T10:31:12.887477+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521798"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri, a software component used for parsing Uniform Resource Identifiers (URIs) in Node.js applications. This vulnerability arises from an issue in how fast-uri processes the scheme part of a URI, specifically when it contains special characters that are percent-encoded. An attacker can exploit this by crafting a malicious URI, causing the parser to misinterpret the host, which can lead to serious security risks. These risks include unauthorized redirection to external websites, server-side request forgery (SSRF) where the application makes unintended requests to internal or external resources, and bypassing security policies.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-76172"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521798",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521798"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-76172",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-76172"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-76172",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76172"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-jqff-g426-hqxp",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-jqff-g426-hqxp"
        }
      ],
      "release_date": "2026-08-24T10:07:56.440000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects"
    },
    {
      "cve": "CVE-2026-81521",
      "cwe": {
        "id": "CWE-791",
        "name": "Incomplete Filtering of Special Elements"
      },
      "discovery_date": "2026-08-27T20:16:51.506209+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2525215"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the MongoDB Go Driver. The `Client.BulkWrite` operation does not properly validate database names, allowing a specially crafted name with reserved characters to redirect write operations. This vulnerability could enable an attacker to modify or corrupt data in unintended databases and collections.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "go.mongodb.org/mongo-driver: MongoDB Go Driver: Write redirection via unvalidated database name in Client.BulkWrite",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-81521"
        },
        {
          "category": "external",
          "summary": "RHBZ#2525215",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525215"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-81521",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-81521"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-81521",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81521"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/go.mongodb.org/mongo-driver/v2@v2.8.2",
          "url": "https://pkg.go.dev/go.mongodb.org/mongo-driver/v2@v2.8.2"
        }
      ],
      "release_date": "2026-08-27T18:31:45.450000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "go.mongodb.org/mongo-driver: MongoDB Go Driver: Write redirection via unvalidated database name in Client.BulkWrite"
    },
    {
      "cve": "CVE-2026-84292",
      "cwe": {
        "id": "CWE-140",
        "name": "Improper Neutralization of Delimiters"
      },
      "discovery_date": "2026-09-02T20:21:15.599288+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2527747"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri. This component improperly serializes the port component of a Uniform Resource Identifier (URI) without validating its content. A remote attacker can exploit this by crafting a malicious port value that injects authority delimiters. This manipulation can demote the intended host to user information and redirect the authority to an attacker-controlled host, leading to information disclosure as applications interpret the attacker\u0027s host as legitimate.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw. Applications utilizing the `fast-uri` library in Red Hat environments are susceptible to authority injection if they process untrusted data as the port component of a URI. This could allow an attacker to redirect network traffic to an arbitrary host, compromising communication integrity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84292"
        },
        {
          "category": "external",
          "summary": "RHBZ#2527747",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527747"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84292",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84292"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84292",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84292"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3"
        }
      ],
      "release_date": "2026-09-02T20:09:51.415000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization"
    },
    {
      "cve": "CVE-2026-84375",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-09-01T21:51:30.205823+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2527118"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in js-yaml, a JavaScript YAML parser. An attacker can exploit this by providing a specially crafted YAML document that causes the parser to perform excessive processing when handling merge keys with empty sources. This can lead to prolonged CPU consumption, effectively causing a denial of service (DoS) for applications that process untrusted YAML input.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in js-yaml, affecting applications that process untrusted YAML input. The flaw allows an attacker to craft a small YAML document that, when parsed, can lead to prolonged CPU consumption due to inefficient merge key processing, potentially exhausting system resources. This is particularly relevant where applications handle external YAML data and have merge processing enabled by default.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84375"
        },
        {
          "category": "external",
          "summary": "RHBZ#2527118",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527118"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84375",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84375"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84375",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84375"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639",
          "url": "https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/6a8e05f9a485188ed730ac81e81ae221352ef480",
          "url": "https://github.com/nodeca/js-yaml/commit/6a8e05f9a485188ed730ac81e81ae221352ef480"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/d90b6612a5a84385bdcb556c44578eac76dc0f6b",
          "url": "https://github.com/nodeca/js-yaml/commit/d90b6612a5a84385bdcb556c44578eac76dc0f6b"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/pull/797",
          "url": "https://github.com/nodeca/js-yaml/pull/797"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.2",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.2",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-2883-xcg3-v3hh",
          "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-2883-xcg3-v3hh"
        }
      ],
      "release_date": "2026-09-01T21:43:13.617000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing"
    },
    {
      "cve": "CVE-2026-84394",
      "cwe": {
        "id": "CWE-1289",
        "name": "Improper Validation of Unsafe Equivalence in Input"
      },
      "discovery_date": "2026-09-02T20:31:21.036047+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2527756"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri. The library incorrectly processes Uniform Resource Identifier (URI) hosts containing unbalanced brackets, leading to a discrepancy in how the host is parsed by fast-uri compared to other HTTP clients. This host confusion can allow an attacker to bypass security policies, such as Server-Side Request Forgery (SSRF) denylists or redirect allowlists, by causing an application to evaluate its policy against an incorrect host string. This could result in unintended network requests or access to unauthorized resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is rated Moderate because successful exploitation requires a specific configuration where fast-uri handles security checks but a different client resolves the URL, enabling security policy bypasses without direct code execution. This affects fast-uri versions 2.4.5, 3.1.6, and 4.1.3 (fixed in 2.4.6, 3.1.7, and 4.1.4).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84394"
        },
        {
          "category": "external",
          "summary": "RHBZ#2527756",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527756"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84394",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84394"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84394",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84394"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-58mr-gqgx-xq4g",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-58mr-gqgx-xq4g"
        }
      ],
      "release_date": "2026-09-02T20:25:35.399000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T12:48:53+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68044"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:113a53ee67c1311ae8d6a5284b854e14230efda2a2a6c6b5552a4dcd92a126c2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:656136d4c7b72d2c3239f84b22e8228a635372d85fdaf1ac5c764e365339a6fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:91b3d6f34e7f2061d048302b5569da9a47fcfce85910341441d2d99e610fcf00_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:e4f03dada46883472ee531eb44d41d092b010739377b385cb50136753b9da47c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:15dfe95f642c53a78955821fa81ae9ee87fce8a110d14bc3b1ffe8def4e1c0f4_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:e1efba6747bbc718f39513f9583fcbd194456848dce4279363d80f5907786746_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8dee7d6a99673f300e1ec7a95d5d69ed4e5545d420e48de0e95f09dd017282f9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:9981379fe8cc0c2e266bc5f911ce81a1a97f94ab774ca9bad2ddaa2d3f030cb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:bf466b51aa1f15e0e84e46cc6b764b4d0d749a4ac2fddcbaea5821c5ba6228ae_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:df00f65b443a30d4c10867bf67832de6938cd1366803429b35531deba6c1d82d_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:55e8187000c001327f21f0591ef0c82fad4f5d97a8f0cdd233394207702f0c6f_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:c1f4abaaf64db27af7c31e8272bd97e0c50ee35734bee1de5fa1c3e7dee36722_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:8e4f8befc4ef0ab57f2d54048db341bcfde05f1e4da11c37272153a2bf4894ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:fbc0321779a2ee25d6b45b4c3812b87abb6fe5723730ba0954a8d239c593eca9_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:7ce7b208360c6c491f0864ec4fe32ae9cdeb2c9f047b3c044721590cb18b1510_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:e0831cf9f206e4a60b140ad2b4fdd0991557d70f59155e56d3f5eb21e4514bfe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:1dbaa4f464fea6256d911080384aa6b6cca0a146dc44592ecbb1c47e103d1595_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:ff41c98221cce04e0937ddcdde2face8623b208ebfa81cb5fcc26b5c49ef0ca1_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:30e5e2a81aedbc24c3f90eab44be0cb6eeba7d289cf4acb9ee480a77ad4e19b4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:d0791c0e0aad6f6b0a3c776d9954a3e9e8ddf270e3755b188866af413ea07313_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a5fb17e530327f02e48e6841358127d9fb10a80b358ec826382a28cf2410fe01_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:ea81725d983f8981d5cf5da7a6a219be4b3b0c0436859e47e9d22331bbcbb945_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:7ce6544b3bae3cc7eb10fa205f6e2bf61c9aabc310daca4b8ff148e6814e8cd7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:f69df76136f704f20f27e8d875e8b8912494fd5ccbcb2e0df72a3e21ef71f5cb_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:63ba68ee2c1ce3e5cd527a660f1b5b0b1aa88117188ff7bf9d21d81210ea9f99_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:9244877e26ecf46ba570c25799845f8fa625e2f85efc3ab707f5acdcde8c8923_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:14a88eafb9028ecf134d21ad5f22f925d6bb5b5f0eeded1ab465445dbb9025e7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:a832e8d29cfd4595ecdeac4a4e5301f4586a9d20ac05ee6a2fa5c92b1243339c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.