RHSA-2026:68253

Vulnerability from csaf_redhat - Published: 2026-09-16 15:11 - Updated: 2026-09-22 10:14
Summary
Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.4 Security Update
Severity
Important
Notes
Topic: Red Hat Edge Manager Version 1.1.4 Security Update
Details: Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused management of edge devices and applications. It supports image-mode RHEL and container workloads that run on Podman/Docker or Kubernetes. RHEM is now available as a standalone feature, providing greater flexibility for edge deployments. In addition to the standalone version, RHEM continues to be offered as a plugin for the following platforms: * Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge devices. * Red Hat Ansible Automation Platform (AAP): Integrates edge management with Ansible automation. This integration enables organizations to optimize the management and orchestration of their fleets of edge devices; whether its thousands of dispersed retail point-of-sale systems or industrial machinery on remote factory floors. Value for customers and partners: * This solution not only helps customers manage thousands of devices but helps scale operations. * To manage large-scale deployments, customers need to be able to integrate with their existing management systems, support remote configuration and over-the-air updates, and collect telemetry data for advanced analytics. * Red Hat Edge Manager offers a simple and security-focused lifecycle management, from onboarding to decommissioning of edge devices. This complete end-to-end solution empowers organizations to gain the most value from the fleets of devices that generate data, all from a centralized location.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-6377

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Next4Biz Information Technologies Inc. CSM (Customer Service Management) allows Path Traversal. This issue affects CSM (Customer Service Management): from 6.8.9 before 8.0.3.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64 —
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64 —
Threats
Impact Important
CVE-2026-13149

A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1333 - Inefficient Regular Expression Complexity
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64 —
Workaround
Threats
Impact Important
CVE-2026-25681

A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Fixed 24 products, the same list as for CVE-2026-6377
Known not affected 2 products, the same list as for CVE-2026-6377
Threats
Impact Important
CVE-2026-27136

A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Fixed 24 products, the same list as for CVE-2026-6377
Known not affected 2 products, the same list as for CVE-2026-6377
Threats
Impact Important
CVE-2026-39820

A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-606 - Unchecked Input for Loop Condition
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64 —
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64 —
Workaround
Threats
Impact Important
CVE-2026-39831

A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CWE-347 - Improper Verification of Cryptographic Signature
Affected products
Fixed 24 products, the same list as for CVE-2026-6377
Known not affected 2 products, the same list as for CVE-2026-6377
Threats
Impact Important
CVE-2026-41178

A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 24 products, the same list as for CVE-2026-6377
Known not affected 2 products, the same list as for CVE-2026-6377
Threats
Impact Important
CVE-2026-42306

A flaw was found in the Moby container framework. A race condition occurs during the `docker cp` mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could overwrite host files, potentially leading to data corruption or a denial of service.

7.2 (High)
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H
CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition
Affected products
Fixed 24 products, the same list as for CVE-2026-6377
Known not affected 2 products, the same list as for CVE-2026-6377
Threats
Impact Important
CVE-2026-42499

A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1046 - Creation of Immutable Text Using String Concatenation
Affected products
Fixed 2 products, the same list as for CVE-2026-39820
Known not affected 24 products, the same list as for CVE-2026-39820
Threats
Impact Important
CVE-2026-44740

A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-606 - Unchecked Input for Loop Condition
Affected products
Fixed 24 products, the same list as for CVE-2026-6377
Known not affected 2 products, the same list as for CVE-2026-6377
Threats
Impact Important
CVE-2026-45819

A flaw was found in baseline-browser-mapping. This vulnerability allows an attacker to cause a denial of service by providing invalid or conflicting input parameters. The affected component improperly terminates the process instead of handling the input error gracefully, leading to immediate service disruption.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-617 - Reachable Assertion
Affected products
Fixed 2 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-46597

A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-681 - Incorrect Conversion between Numeric Types
Affected products
Fixed 24 products, the same list as for CVE-2026-6377
Known not affected 2 products, the same list as for CVE-2026-6377
Threats
Impact Important
CVE-2026-48050

A flaw was found in Arc. This vulnerability allows a remote unauthenticated attacker to access Go debug pprof endpoints due to improper authentication bypass. Successful exploitation can lead to the disclosure of sensitive runtime state information and enable a CPU-burn Denial of Service (DoS) attack, impacting the availability and confidentiality of the system.

8.2 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64 —
Vendor Fix fix
Workaround
Threats
Impact Important
CVE-2026-50162

A flaw was found in oras-go. The file content store, intended to confine writes to a specified working directory, does not properly account for symbolic link (symlink) traversal. A remote attacker, by providing a specially crafted blob title, could exploit this vulnerability to create files outside the intended working directory. This filesystem boundary bypass allows for arbitrary file creation, potentially leading to unauthorized data modification or system compromise depending on the runtime environment.

5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products
Fixed 24 products, the same list as for CVE-2026-6377
Known not affected 2 products, the same list as for CVE-2026-6377
Threats
Impact Moderate
CVE-2026-56858

A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Fixed 2 products, the same list as for CVE-2026-39820
Known not affected 24 products, the same list as for CVE-2026-39820
Threats
Impact Important
CVE-2026-56859

A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Affected products
Fixed 2 products, the same list as for CVE-2026-39820
Known not affected 24 products, the same list as for CVE-2026-39820
Threats
Impact Important
CVE-2026-59869

A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-606 - Unchecked Input for Loop Condition
Affected products
Fixed 2 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-69152

A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 2 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-71556

A flaw was found in go-git, an extensible Git implementation library. Worktree operations, such as checkout, status, and add, resolve symbolic links within the working tree without proper boundary confinement. This allows a remote attacker to craft a malicious repository containing a symlink, which, when cloned and its worktree operations are used, can lead to reading from or writing to arbitrary files outside the intended working directory. This could result in information disclosure or arbitrary file modification.

7.1 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L
CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Affected products
Fixed 24 products, the same list as for CVE-2026-6377
Known not affected 2 products, the same list as for CVE-2026-6377
Threats
Impact Important
CVE-2026-73088

A flaw was found in Browserslist, a tool for sharing browser and Node.js versions. An attacker could provide specially crafted statistics data, which the tool processes without proper validation. This improper handling of untrusted data can lead to prototype pollution, potentially causing the application to crash and resulting in a denial of service.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
Affected products
Fixed 2 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-73089

A flaw was found in Browserslist, a configuration tool for front-end development. An attacker can exploit this vulnerability by influencing repeated query values, leading to unbounded memory growth. This issue can cause the application to consume excessive memory, resulting in an out-of-memory process crash and a Denial of Service (DoS) for affected systems.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 2 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-73643

A flaw was found in js-yaml, a JavaScript YAML parser. A remote attacker could exploit this vulnerability by providing specially crafted YAML input containing nested flow collections. This can lead to exponential parsing time when the application processes untrusted input, consuming excessive CPU resources. This resource exhaustion can block the Node.js event loop and cause a Denial of Service (DoS) for the affected process.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1333 - Inefficient Regular Expression Complexity
Affected products
Fixed 2 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-75899

A flaw was found in fast-uri, a URI parser for Node.js. The component incorrectly decodes percent escapes in a hostname twice during URI parsing and authority recomposition. This double decoding can allow a remote attacker to manipulate a URI to point to a different network destination, such as a loopback address. This vulnerability can lead to Server-Side Request Forgery (SSRF) and bypass host-based security policies.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-140 - Improper Neutralization of Delimiters
Affected products
Fixed 2 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-75931

A flaw was found in fast-uri, a URI parser for Node.js. This vulnerability arises because the parser fails to consistently convert internationalized domain names (IDN) to their standard ASCII form when processing scheme-relative references. This inconsistency can lead to host confusion, where an application might validate a URI against a security policy using one hostname, but then resolve to a different, potentially malicious, hostname. This discrepancy could allow an attacker to bypass security policies and access unauthorized resources.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
Affected products
Fixed 2 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-75975

A flaw was found in fast-uri, a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not fully validate the IPv6 grammar, allowing invalid trailing text in an authority to be silently discarded. This can lead to a malformed, attacker-controlled host being normalized into a different, valid IPv6 destination, such as a local or private IPv6 target. An application normalizing untrusted URLs before outbound requests, redirects, or proxy routing could be redirected, resulting in a server-side request forgery (SSRF) and address-policy bypass.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-918 - Server-Side Request Forgery (SSRF)
Affected products
Fixed 2 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-76172

A flaw was found in fast-uri, a software component used for parsing Uniform Resource Identifiers (URIs) in Node.js applications. This vulnerability arises from an issue in how fast-uri processes the scheme part of a URI, specifically when it contains special characters that are percent-encoded. An attacker can exploit this by crafting a malicious URI, causing the parser to misinterpret the host, which can lead to serious security risks. These risks include unauthorized redirection to external websites, server-side request forgery (SSRF) where the application makes unintended requests to internal or external resources, and bypassing security policies.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-76 - Improper Neutralization of Equivalent Special Elements
Affected products
Fixed 2 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-81521

A flaw was found in the MongoDB Go Driver. The `Client.BulkWrite` operation does not properly validate database names, allowing a specially crafted name with reserved characters to redirect write operations. This vulnerability could enable an attacker to modify or corrupt data in unintended databases and collections.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-791 - Incomplete Filtering of Special Elements
Affected products
Fixed 24 products, the same list as for CVE-2026-6377
Known not affected 2 products, the same list as for CVE-2026-6377
Threats
Impact Important
CVE-2026-84292

A flaw was found in fast-uri. This component improperly serializes the port component of a Uniform Resource Identifier (URI) without validating its content. A remote attacker can exploit this by crafting a malicious port value that injects authority delimiters. This manipulation can demote the intended host to user information and redirect the authority to an attacker-controlled host, leading to information disclosure as applications interpret the attacker's host as legitimate.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-140 - Improper Neutralization of Delimiters
Affected products
Fixed 2 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
CVE-2026-84375

A flaw was found in js-yaml, a JavaScript YAML parser. An attacker can exploit this by providing a specially crafted YAML document that causes the parser to perform excessive processing when handling merge keys with empty sources. This can lead to prolonged CPU consumption, effectively causing a denial of service (DoS) for applications that process untrusted YAML input.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
Affected products
Fixed 2 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Moderate
CVE-2026-84394

A flaw was found in fast-uri. The library incorrectly processes Uniform Resource Identifier (URI) hosts containing unbalanced brackets, leading to a discrepancy in how the host is parsed by fast-uri compared to other HTTP clients. This host confusion can allow an attacker to bypass security policies, such as Server-Side Request Forgery (SSRF) denylists or redirect allowlists, by causing an application to evaluate its policy against an incorrect host string. This could result in unintended network requests or access to unauthorized resources.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-1289 - Improper Validation of Unsafe Equivalence in Input
Affected products
Fixed 2 products, the same list as for CVE-2026-13149
Known not affected 24 products, the same list as for CVE-2026-13149
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:68253 self
https://access.redhat.com/security/cve/CVE-2026-13149 external
https://access.redhat.com/security/cve/CVE-2026-25681 external
https://access.redhat.com/security/cve/CVE-2026-27136 external
https://access.redhat.com/security/cve/CVE-2026-39820 external
https://access.redhat.com/security/cve/CVE-2026-39831 external
https://access.redhat.com/security/cve/CVE-2026-41178 external
https://access.redhat.com/security/cve/CVE-2026-42306 external
https://access.redhat.com/security/cve/CVE-2026-42499 external
https://access.redhat.com/security/cve/CVE-2026-44740 external
https://access.redhat.com/security/cve/CVE-2026-45819 external
https://access.redhat.com/security/cve/CVE-2026-46597 external
https://access.redhat.com/security/cve/CVE-2026-48050 external
https://access.redhat.com/security/cve/CVE-2026-50162 external
https://access.redhat.com/security/cve/CVE-2026-56858 external
https://access.redhat.com/security/cve/CVE-2026-56859 external
https://access.redhat.com/security/cve/CVE-2026-59869 external
https://access.redhat.com/security/cve/CVE-2026-6377 external
https://access.redhat.com/security/cve/CVE-2026-69152 external
https://access.redhat.com/security/cve/CVE-2026-71556 external
https://access.redhat.com/security/cve/CVE-2026-73088 external
https://access.redhat.com/security/cve/CVE-2026-73089 external
https://access.redhat.com/security/cve/CVE-2026-73643 external
https://access.redhat.com/security/cve/CVE-2026-75899 external
https://access.redhat.com/security/cve/CVE-2026-75931 external
https://access.redhat.com/security/cve/CVE-2026-75975 external
https://access.redhat.com/security/cve/CVE-2026-76172 external
https://access.redhat.com/security/cve/CVE-2026-81521 external
https://access.redhat.com/security/cve/CVE-2026-84292 external
https://access.redhat.com/security/cve/CVE-2026-84375 external
https://access.redhat.com/security/cve/CVE-2026-84394 external
https://access.redhat.com/security/updates/classi… external
https://docs.redhat.com/en/documentation/red_hat_… external
https://docs.redhat.com/en/documentation/red_hat_… external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-6377 self
https://www.cve.org/CVERecord?id=CVE-2026-6377 external
https://access.redhat.com/security/cve/CVE-2026-13149 self
https://bugzilla.redhat.com/show_bug.cgi?id=2494813 external
https://www.cve.org/CVERecord?id=CVE-2026-13149 external
https://nvd.nist.gov/vuln/detail/CVE-2026-13149 external
https://github.com/juliangruber/brace-expansion/c… external
https://www.npmjs.com/package/brace-expansion external
https://access.redhat.com/security/cve/CVE-2026-25681 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480761 external
https://www.cve.org/CVERecord?id=CVE-2026-25681 external
https://nvd.nist.gov/vuln/detail/CVE-2026-25681 external
https://go.dev/cl/781703 external
https://go.dev/issue/79574 external
https://groups.google.com/g/golang-announce/c/iI-… external
https://pkg.go.dev/vuln/GO-2026-5029 external
https://access.redhat.com/security/cve/CVE-2026-27136 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480757 external
https://www.cve.org/CVERecord?id=CVE-2026-27136 external
https://nvd.nist.gov/vuln/detail/CVE-2026-27136 external
https://go.dev/cl/781685 external
https://go.dev/issue/79575 external
https://pkg.go.dev/vuln/GO-2026-5030 external
https://access.redhat.com/security/cve/CVE-2026-39820 self
https://bugzilla.redhat.com/show_bug.cgi?id=2467820 external
https://www.cve.org/CVERecord?id=CVE-2026-39820 external
https://nvd.nist.gov/vuln/detail/CVE-2026-39820 external
https://go.dev/cl/759940 external
https://go.dev/issue/78566 external
https://groups.google.com/g/golang-announce/c/qcC… external
https://pkg.go.dev/vuln/GO-2026-4986 external
https://access.redhat.com/security/cve/CVE-2026-39831 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480675 external
https://www.cve.org/CVERecord?id=CVE-2026-39831 external
https://nvd.nist.gov/vuln/detail/CVE-2026-39831 external
https://go.dev/cl/781662 external
https://go.dev/issue/79566 external
https://groups.google.com/g/golang-announce/c/a08… external
https://pkg.go.dev/vuln/GO-2026-5019 external
https://access.redhat.com/security/cve/CVE-2026-41178 self
https://bugzilla.redhat.com/show_bug.cgi?id=2484830 external
https://www.cve.org/CVERecord?id=CVE-2026-41178 external
https://nvd.nist.gov/vuln/detail/CVE-2026-41178 external
https://github.com/open-telemetry/opentelemetry-g… external
https://github.com/open-telemetry/opentelemetry-g… external
https://access.redhat.com/security/cve/CVE-2026-42306 self
https://bugzilla.redhat.com/show_bug.cgi?id=2488484 external
https://www.cve.org/CVERecord?id=CVE-2026-42306 external
https://nvd.nist.gov/vuln/detail/CVE-2026-42306 external
https://github.com/moby/moby/security/advisories/… external
https://access.redhat.com/security/cve/CVE-2026-42499 self
https://bugzilla.redhat.com/show_bug.cgi?id=2467809 external
https://www.cve.org/CVERecord?id=CVE-2026-42499 external
https://nvd.nist.gov/vuln/detail/CVE-2026-42499 external
https://go.dev/cl/771520 external
https://go.dev/issue/78987 external
https://pkg.go.dev/vuln/GO-2026-4977 external
https://access.redhat.com/security/cve/CVE-2026-44740 self
https://bugzilla.redhat.com/show_bug.cgi?id=2483894 external
https://www.cve.org/CVERecord?id=CVE-2026-44740 external
https://nvd.nist.gov/vuln/detail/CVE-2026-44740 external
https://github.com/go-git/go-billy/releases/tag/v5.9.0 external
https://github.com/go-git/go-billy/releases/tag/v… external
https://github.com/go-git/go-billy/security/advis… external
https://access.redhat.com/security/cve/CVE-2026-45819 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515240 external
https://www.cve.org/CVERecord?id=CVE-2026-45819 external
https://nvd.nist.gov/vuln/detail/CVE-2026-45819 external
https://github.com/web-platform-dx/baseline-brows… external
https://github.com/web-platform-dx/baseline-brows… external
https://www.npmjs.com/package/baseline-browser-mapping external
https://access.redhat.com/security/cve/CVE-2026-46597 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480678 external
https://www.cve.org/CVERecord?id=CVE-2026-46597 external
https://nvd.nist.gov/vuln/detail/CVE-2026-46597 external
https://go.dev/cl/781620 external
https://go.dev/issue/79561 external
https://pkg.go.dev/vuln/GO-2026-5013 external
https://access.redhat.com/security/cve/CVE-2026-48050 self
https://www.cve.org/CVERecord?id=CVE-2026-48050 external
https://access.redhat.com/security/cve/CVE-2026-50162 self
https://bugzilla.redhat.com/show_bug.cgi?id=2499694 external
https://www.cve.org/CVERecord?id=CVE-2026-50162 external
https://nvd.nist.gov/vuln/detail/CVE-2026-50162 external
https://github.com/oras-project/oras-go/security/… external
https://access.redhat.com/security/cve/CVE-2026-56858 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515838 external
https://www.cve.org/CVERecord?id=CVE-2026-56858 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56858 external
https://go.dev/cl/807100 external
https://go.dev/issue/80435 external
https://groups.google.com/g/golang-announce/c/94p… external
https://pkg.go.dev/vuln/GO-2026-6091 external
https://access.redhat.com/security/cve/CVE-2026-56859 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515840 external
https://www.cve.org/CVERecord?id=CVE-2026-56859 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56859 external
https://go.dev/cl/803320 external
https://go.dev/issue/80481 external
https://pkg.go.dev/vuln/GO-2026-6088 external
https://access.redhat.com/security/cve/CVE-2026-59869 self
https://bugzilla.redhat.com/show_bug.cgi?id=2498122 external
https://www.cve.org/CVERecord?id=CVE-2026-59869 external
https://nvd.nist.gov/vuln/detail/CVE-2026-59869 external
https://github.com/nodeca/js-yaml/commit/24f13e79… external
https://github.com/nodeca/js-yaml/commit/59423c6f… external
https://github.com/nodeca/js-yaml/releases/tag/3.15.0 external
https://github.com/nodeca/js-yaml/releases/tag/4.3.0 external
https://github.com/nodeca/js-yaml/security/adviso… external
https://access.redhat.com/security/cve/CVE-2026-69152 self
https://bugzilla.redhat.com/show_bug.cgi?id=2510722 external
https://www.cve.org/CVERecord?id=CVE-2026-69152 external
https://nvd.nist.gov/vuln/detail/CVE-2026-69152 external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/s… external
https://access.redhat.com/security/cve/CVE-2026-71556 self
https://bugzilla.redhat.com/show_bug.cgi?id=2512562 external
https://www.cve.org/CVERecord?id=CVE-2026-71556 external
https://nvd.nist.gov/vuln/detail/CVE-2026-71556 external
https://github.com/go-git/go-git/commit/008a78f2d… external
https://github.com/go-git/go-git/commit/661d1c7f1… external
https://github.com/go-git/go-git/releases/tag/v5.19.2 external
https://github.com/go-git/go-git/releases/tag/v6.… external
https://github.com/go-git/go-git/security/advisor… external
https://access.redhat.com/security/cve/CVE-2026-73088 self
https://bugzilla.redhat.com/show_bug.cgi?id=2514177 external
https://www.cve.org/CVERecord?id=CVE-2026-73088 external
https://nvd.nist.gov/vuln/detail/CVE-2026-73088 external
https://github.com/browserslist/browserslist/comm… external
https://github.com/browserslist/browserslist/rele… external
https://github.com/browserslist/browserslist/secu… external
https://access.redhat.com/security/cve/CVE-2026-73089 self
https://bugzilla.redhat.com/show_bug.cgi?id=2514195 external
https://www.cve.org/CVERecord?id=CVE-2026-73089 external
https://nvd.nist.gov/vuln/detail/CVE-2026-73089 external
https://github.com/browserslist/browserslist/comm… external
https://github.com/browserslist/browserslist/secu… external
https://access.redhat.com/security/cve/CVE-2026-73643 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515531 external
https://www.cve.org/CVERecord?id=CVE-2026-73643 external
https://nvd.nist.gov/vuln/detail/CVE-2026-73643 external
https://github.com/nodeca/js-yaml/commit/3e5240f9… external
https://github.com/nodeca/js-yaml/security/adviso… external
https://access.redhat.com/security/cve/CVE-2026-75899 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521778 external
https://www.cve.org/CVERecord?id=CVE-2026-75899 external
https://nvd.nist.gov/vuln/detail/CVE-2026-75899 external
https://cna.openjsf.org/security-advisories.html external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-75931 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521777 external
https://www.cve.org/CVERecord?id=CVE-2026-75931 external
https://nvd.nist.gov/vuln/detail/CVE-2026-75931 external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-75975 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521779 external
https://www.cve.org/CVERecord?id=CVE-2026-75975 external
https://nvd.nist.gov/vuln/detail/CVE-2026-75975 external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-76172 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521798 external
https://www.cve.org/CVERecord?id=CVE-2026-76172 external
https://nvd.nist.gov/vuln/detail/CVE-2026-76172 external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-81521 self
https://bugzilla.redhat.com/show_bug.cgi?id=2525215 external
https://www.cve.org/CVERecord?id=CVE-2026-81521 external
https://nvd.nist.gov/vuln/detail/CVE-2026-81521 external
https://pkg.go.dev/go.mongodb.org/mongo-driver/v2… external
https://access.redhat.com/security/cve/CVE-2026-84292 self
https://bugzilla.redhat.com/show_bug.cgi?id=2527747 external
https://www.cve.org/CVERecord?id=CVE-2026-84292 external
https://nvd.nist.gov/vuln/detail/CVE-2026-84292 external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-84375 self
https://bugzilla.redhat.com/show_bug.cgi?id=2527118 external
https://www.cve.org/CVERecord?id=CVE-2026-84375 external
https://nvd.nist.gov/vuln/detail/CVE-2026-84375 external
https://github.com/nodeca/js-yaml/commit/3485bc06… external
https://github.com/nodeca/js-yaml/commit/6a8e05f9… external
https://github.com/nodeca/js-yaml/commit/d90b6612… external
https://github.com/nodeca/js-yaml/pull/797 external
https://github.com/nodeca/js-yaml/releases/tag/3.15.2 external
https://github.com/nodeca/js-yaml/releases/tag/4.3.2 external
https://github.com/nodeca/js-yaml/security/adviso… external
https://access.redhat.com/security/cve/CVE-2026-84394 self
https://bugzilla.redhat.com/show_bug.cgi?id=2527756 external
https://www.cve.org/CVERecord?id=CVE-2026-84394 external
https://nvd.nist.gov/vuln/detail/CVE-2026-84394 external
https://github.com/fastify/fast-uri/security/advi… external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Edge Manager Version 1.1.4 Security Update",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused\nmanagement of edge devices and applications. It supports image-mode RHEL and\ncontainer workloads that run on Podman/Docker or Kubernetes.\n\nRHEM is now available as a standalone feature, providing greater flexibility for\nedge deployments. In addition to the standalone version, RHEM continues to be\noffered as a plugin for the following platforms:\n\n* Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge\ndevices.\n* Red Hat Ansible Automation Platform (AAP): Integrates edge management with\nAnsible automation.\n\nThis integration enables organizations to optimize the management and\norchestration of their fleets of edge devices; whether its thousands of\ndispersed retail point-of-sale systems or industrial machinery on remote factory\nfloors.\n\nValue for customers and partners:\n\n* This solution not only helps customers manage thousands of devices but helps\nscale operations.\n* To manage large-scale deployments, customers need to be able to integrate with\ntheir existing management systems, support remote configuration and over-the-air\nupdates, and collect telemetry data for advanced analytics.\n* Red Hat Edge Manager offers a simple and security-focused lifecycle\nmanagement, from onboarding to decommissioning of edge devices.\n\nThis complete end-to-end solution empowers organizations to gain the most value\nfrom the fleets of devices that generate data, all from a centralized location.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:68253",
        "url": "https://access.redhat.com/errata/RHSA-2026:68253"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-13149",
        "url": "https://access.redhat.com/security/cve/CVE-2026-13149"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
        "url": "https://access.redhat.com/security/cve/CVE-2026-25681"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
        "url": "https://access.redhat.com/security/cve/CVE-2026-27136"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39820"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39831"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41178",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41178"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42306",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42306"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42499"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-44740",
        "url": "https://access.redhat.com/security/cve/CVE-2026-44740"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-45819",
        "url": "https://access.redhat.com/security/cve/CVE-2026-45819"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
        "url": "https://access.redhat.com/security/cve/CVE-2026-46597"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-48050",
        "url": "https://access.redhat.com/security/cve/CVE-2026-48050"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-50162",
        "url": "https://access.redhat.com/security/cve/CVE-2026-50162"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56858",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56858"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56859",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56859"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59869",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59869"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-6377",
        "url": "https://access.redhat.com/security/cve/CVE-2026-6377"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-69152",
        "url": "https://access.redhat.com/security/cve/CVE-2026-69152"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-71556",
        "url": "https://access.redhat.com/security/cve/CVE-2026-71556"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-73088",
        "url": "https://access.redhat.com/security/cve/CVE-2026-73088"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-73089",
        "url": "https://access.redhat.com/security/cve/CVE-2026-73089"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-73643",
        "url": "https://access.redhat.com/security/cve/CVE-2026-73643"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-75899",
        "url": "https://access.redhat.com/security/cve/CVE-2026-75899"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-75931",
        "url": "https://access.redhat.com/security/cve/CVE-2026-75931"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-75975",
        "url": "https://access.redhat.com/security/cve/CVE-2026-75975"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-76172",
        "url": "https://access.redhat.com/security/cve/CVE-2026-76172"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-81521",
        "url": "https://access.redhat.com/security/cve/CVE-2026-81521"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-84292",
        "url": "https://access.redhat.com/security/cve/CVE-2026-84292"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-84375",
        "url": "https://access.redhat.com/security/cve/CVE-2026-84375"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-84394",
        "url": "https://access.redhat.com/security/cve/CVE-2026-84394"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro",
        "url": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro",
        "url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68253.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.4 Security Update",
    "tracking": {
      "current_release_date": "2026-09-22T10:14:26+00:00",
      "generator": {
        "date": "2026-09-22T10:14:26+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.0"
        }
      },
      "id": "RHSA-2026:68253",
      "initial_release_date": "2026-09-16T15:11:03+00:00",
      "revision_history": [
        {
          "date": "2026-09-16T15:11:03+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-16T15:11:30+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-22T10:14:26+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Edge Manager 1.1",
                "product": {
                  "name": "Red Hat Edge Manager 1.1",
                  "product_id": "Red Hat Edge Manager 1.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:edge_manager:1.1::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Edge Manager"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-alert-exporter-rhel9@sha256%3Ae53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-alert-exporter-rhel9\u0026tag=1789488080"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-alertmanager-proxy-rhel9@sha256%3A72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9\u0026tag=1789486160"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-api-rhel9@sha256%3A37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-api-rhel9\u0026tag=1789487080"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-cli-artifacts-rhel9@sha256%3Aac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9\u0026tag=1789485800"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-db-setup-rhel9@sha256%3A131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-db-setup-rhel9\u0026tag=1789487116"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-imagebuilder-api-rhel9@sha256%3Afc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9\u0026tag=1789486154"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-imagebuilder-worker-rhel9@sha256%3A709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9\u0026tag=1789485338"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-pam-issuer-rhel9@sha256%3A04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-pam-issuer-rhel9\u0026tag=1789486466"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-periodic-rhel9@sha256%3Ac3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-periodic-rhel9\u0026tag=1789486513"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-telemetry-gateway-rhel9@sha256%3Ad36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9\u0026tag=1789485664"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-ui-ocp-rhel9@sha256%3A662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-ocp-rhel9\u0026tag=1789486446"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-userinfo-proxy-rhel9@sha256%3Aa07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9\u0026tag=1789485648"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
                  "product_id": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-worker-rhel9@sha256%3A3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-worker-rhel9\u0026tag=1789486829"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-alert-exporter-rhel9@sha256%3A8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-alert-exporter-rhel9\u0026tag=1789488080"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-alertmanager-proxy-rhel9@sha256%3A70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9\u0026tag=1789486160"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-api-rhel9@sha256%3A612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-api-rhel9\u0026tag=1789487080"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-cli-artifacts-rhel9@sha256%3Aaf270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9\u0026tag=1789485800"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-db-setup-rhel9@sha256%3A5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-db-setup-rhel9\u0026tag=1789487116"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-imagebuilder-api-rhel9@sha256%3A71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9\u0026tag=1789486154"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-imagebuilder-worker-rhel9@sha256%3Ae0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9\u0026tag=1789485338"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-pam-issuer-rhel9@sha256%3A7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-pam-issuer-rhel9\u0026tag=1789486466"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-periodic-rhel9@sha256%3A2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-periodic-rhel9\u0026tag=1789486513"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-telemetry-gateway-rhel9@sha256%3A0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9\u0026tag=1789485664"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-ui-ocp-rhel9@sha256%3Acabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-ocp-rhel9\u0026tag=1789486446"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-userinfo-proxy-rhel9@sha256%3Ac871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9\u0026tag=1789485648"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64",
                "product": {
                  "name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64",
                  "product_id": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flightctl-worker-rhel9@sha256%3A8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-worker-rhel9\u0026tag=1789486829"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64 as a component of Red Hat Edge Manager 1.1",
          "product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        },
        "product_reference": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64",
        "relates_to_product_reference": "Red Hat Edge Manager 1.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-6377",
      "discovery_date": "2026-09-07T14:32:25.132288+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
          ]
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027) vulnerability in Next4Biz Information Technologies Inc. CSM (Customer Service Management) allows Path Traversal.\n\nThis issue affects CSM (Customer Service Management): from 6.8.9 before 8.0.3.",
          "title": "Vulnerability description"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-6377"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-6377",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-6377"
        }
      ],
      "release_date": "2026-09-07T14:15:48.553000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "CSM: Next4Biz CSM: Information disclosure via path traversal vulnerability"
    },
    {
      "cve": "CVE-2026-13149",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "discovery_date": "2026-06-30T10:00:59.843854+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2494813"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in brace-expansion, a widely-used npm package for expanding brace sequences. The expand() function exhibits exponential-time complexity when processing consecutive non-expanding brace groups. An attacker who can supply crafted input to expand(), directly or transitively via minimatch or glob, can cause significant CPU consumption and event-loop blocking, resulting in denial of service. The max option does not mitigate this issue, as it bounds the output size rather than the recursion work.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-13149"
        },
        {
          "category": "external",
          "summary": "RHBZ#2494813",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494813"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-13149",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-13149"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754",
          "url": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754"
        },
        {
          "category": "external",
          "summary": "https://www.npmjs.com/package/brace-expansion",
          "url": "https://www.npmjs.com/package/brace-expansion"
        }
      ],
      "release_date": "2026-06-30T08:30:34.502000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        },
        {
          "category": "workaround",
          "details": "There is no practical mitigation for this vulnerability. The brace-expansion package is typically a transitive dependency pulled in via minimatch and glob, making it difficult to isolate. Users should upgrade to a fixed version of brace-expansion when one becomes available.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity"
    },
    {
      "cve": "CVE-2026-25681",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-22T16:01:08.177603+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480761"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480761",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781703",
          "url": "https://go.dev/cl/781703"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79574",
          "url": "https://go.dev/issue/79574"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5029",
          "url": "https://pkg.go.dev/vuln/GO-2026-5029"
        }
      ],
      "release_date": "2026-05-22T15:01:21.975000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        },
        {
          "category": "workaround",
          "details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
    },
    {
      "cve": "CVE-2026-27136",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-22T16:00:56.609820+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480757"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480757",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781685",
          "url": "https://go.dev/cl/781685"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79575",
          "url": "https://go.dev/issue/79575"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5030",
          "url": "https://pkg.go.dev/vuln/GO-2026-5030"
        }
      ],
      "release_date": "2026-05-22T15:01:22.111000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
    },
    {
      "cve": "CVE-2026-39820",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-05-07T20:01:27.800929+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467820"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39820"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467820",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/759940",
          "url": "https://go.dev/cl/759940"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78566",
          "url": "https://go.dev/issue/78566"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
          "url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4986",
          "url": "https://pkg.go.dev/vuln/GO-2026-4986"
        }
      ],
      "release_date": "2026-05-07T19:41:19.854000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
    },
    {
      "cve": "CVE-2026-39831",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-05-22T04:01:12.861178+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480675"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39831"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480675",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781662",
          "url": "https://go.dev/cl/781662"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79566",
          "url": "https://go.dev/issue/79566"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5019",
          "url": "https://pkg.go.dev/vuln/GO-2026-5019"
        }
      ],
      "release_date": "2026-05-22T02:31:27.436000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
    },
    {
      "cve": "CVE-2026-41178",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-06-04T16:01:10.300537+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484830"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in OpenTelemetry-Go, affecting versions 1.41.0 and 1.43.0. An attacker can exploit this flaw by sending oversized baggage headers, causing the `Parse` function to process invalid inputs and log errors, which can lead to resource exhaustion and service disruption in Red Hat products utilizing these affected OpenTelemetry-Go versions. The impact is considered Important due to the potential for remote, unauthenticated denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484830",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484830"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41178",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "https://github.com/open-telemetry/opentelemetry-go/pull/7880",
          "url": "https://github.com/open-telemetry/opentelemetry-go/pull/7880"
        },
        {
          "category": "external",
          "summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835",
          "url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835"
        }
      ],
      "release_date": "2026-06-04T14:38:23.707000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers"
    },
    {
      "cve": "CVE-2026-42306",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "discovery_date": "2026-06-12T19:01:10.843543+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2488484"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Moby container framework. A race condition occurs during the `docker cp` mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could overwrite host files, potentially leading to data corruption or a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw in the Moby container framework where a race condition during `docker cp` mount setup could allow a malicious container to overwrite arbitrary host files. Exploitation requires an attacker to have control over a running container, which could lead to data corruption or denial of service on the host system.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42306"
        },
        {
          "category": "external",
          "summary": "RHBZ#2488484",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488484"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42306",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42306"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42306",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42306"
        },
        {
          "category": "external",
          "summary": "https://github.com/moby/moby/security/advisories/GHSA-rg2x-37c3-w2rh",
          "url": "https://github.com/moby/moby/security/advisories/GHSA-rg2x-37c3-w2rh"
        }
      ],
      "release_date": "2026-06-12T18:09:22.188000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup"
    },
    {
      "cve": "CVE-2026-42499",
      "cwe": {
        "id": "CWE-1046",
        "name": "Creation of Immutable Text Using String Concatenation"
      },
      "discovery_date": "2026-05-07T20:00:51.685602+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467809"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42499"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467809",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/771520",
          "url": "https://go.dev/cl/771520"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78987",
          "url": "https://go.dev/issue/78987"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
          "url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4977",
          "url": "https://pkg.go.dev/vuln/GO-2026-4977"
        }
      ],
      "release_date": "2026-05-07T19:41:18.615000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
    },
    {
      "cve": "CVE-2026-44740",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-06-01T17:01:53.685793+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2483894"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is rated as an Important severity issue. The `go-billy` library, a Go filesystem abstraction, is vulnerable to a denial of service when processing crafted or malformed input, such as untrusted repository data or filesystem structures. Insufficient validation and missing safety mechanisms can lead to panics, infinite loops, or excessive resource consumption, potentially impacting the availability of applications that rely on this library.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44740"
        },
        {
          "category": "external",
          "summary": "RHBZ#2483894",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483894"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44740",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44740"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-billy/releases/tag/v5.9.0",
          "url": "https://github.com/go-git/go-billy/releases/tag/v5.9.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1",
          "url": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6",
          "url": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6"
        }
      ],
      "release_date": "2026-06-01T16:04:50.358000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        },
        {
          "category": "workaround",
          "details": "To mitigate the issue, we suggest upgrading to versions 5.9.0+ or 6.0.0-alpha.1+",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation"
    },
    {
      "cve": "CVE-2026-45819",
      "cwe": {
        "id": "CWE-617",
        "name": "Reachable Assertion"
      },
      "discovery_date": "2026-08-13T11:30:54.323606+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515240"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in baseline-browser-mapping. This vulnerability allows an attacker to cause a denial of service by providing invalid or conflicting input parameters. The affected component improperly terminates the process instead of handling the input error gracefully, leading to immediate service disruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "baseline-browser-mapping: baseline-browser-mapping: Denial of Service via improper input handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This flaw in the \u0027baseline-browser-mapping\u0027 library can result in a denial of service. Applications utilizing this library may unexpectedly terminate if they process invalid or conflicting input parameters, potentially disrupting services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-45819"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515240",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515240"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-45819",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-45819"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45819",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45819"
        },
        {
          "category": "external",
          "summary": "https://github.com/web-platform-dx/baseline-browser-mapping/blob/b7881aa61c8a057e24468ab5ee18c5ecedbbf691/src/index.ts#L142",
          "url": "https://github.com/web-platform-dx/baseline-browser-mapping/blob/b7881aa61c8a057e24468ab5ee18c5ecedbbf691/src/index.ts#L142"
        },
        {
          "category": "external",
          "summary": "https://github.com/web-platform-dx/baseline-browser-mapping/pull/137/changes#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519",
          "url": "https://github.com/web-platform-dx/baseline-browser-mapping/pull/137/changes#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519"
        },
        {
          "category": "external",
          "summary": "https://www.npmjs.com/package/baseline-browser-mapping",
          "url": "https://www.npmjs.com/package/baseline-browser-mapping"
        }
      ],
      "release_date": "2026-08-13T11:03:42.504000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "baseline-browser-mapping: baseline-browser-mapping: Denial of Service via improper input handling"
    },
    {
      "cve": "CVE-2026-46597",
      "cwe": {
        "id": "CWE-681",
        "name": "Incorrect Conversion between Numeric Types"
      },
      "discovery_date": "2026-05-22T04:01:21.721980+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480678"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46597"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480678",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781620",
          "url": "https://go.dev/cl/781620"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79561",
          "url": "https://go.dev/issue/79561"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5013",
          "url": "https://pkg.go.dev/vuln/GO-2026-5013"
        }
      ],
      "release_date": "2026-05-22T02:31:26.754000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
    },
    {
      "cve": "CVE-2026-48050",
      "discovery_date": "2026-08-21T22:51:05.227994+00:00",
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Arc. This vulnerability allows a remote unauthenticated attacker to access Go debug pprof endpoints due to improper authentication bypass. Successful exploitation can lead to the disclosure of sensitive runtime state information and enable a CPU-burn Denial of Service (DoS) attack, impacting the availability and confidentiality of the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security has determined that this flaw does not affect any currently supported Red Hat products. The vulnerability resides in the Arc component (github.com/basekick-labs/arc), which is not shipped in, bundled with, or included as a dependency of any Red Hat offering. Because the affected code is not present in Red Hat products, they are not vulnerable to this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-48050"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-48050",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-48050"
        }
      ],
      "release_date": "2026-08-21T22:40:12.771000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        },
        {
          "category": "workaround",
          "details": "No mitigation is required. Red Hat products do not ship or include the affected Arc component (github.com/basekick-labs/arc), so they are not exposed to this vulnerability.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/http/pprof: github.com/basekick-labs/arc: Arc: Information disclosure and Denial of Service via unauthenticated debug endpoints"
    },
    {
      "cve": "CVE-2026-50162",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-07-01T21:35:45+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2499694"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in oras-go. The file content store, intended to confine writes to a specified working directory, does not properly account for symbolic link (symlink) traversal. A remote attacker, by providing a specially crafted blob title, could exploit this vulnerability to create files outside the intended working directory. This filesystem boundary bypass allows for arbitrary file creation, potentially leading to unauthorized data modification or system compromise depending on the runtime environment.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "oras-go: oras-go: File store write outside working directory via symlink traversal",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-50162"
        },
        {
          "category": "external",
          "summary": "RHBZ#2499694",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499694"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-50162",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-50162"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50162",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50162"
        },
        {
          "category": "external",
          "summary": "https://github.com/oras-project/oras-go/security/advisories/GHSA-8xwf-rjm4-xvhv",
          "url": "https://github.com/oras-project/oras-go/security/advisories/GHSA-8xwf-rjm4-xvhv"
        }
      ],
      "release_date": "2026-07-01T21:35:45+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "oras-go: oras-go: File store write outside working directory via symlink traversal"
    },
    {
      "cve": "CVE-2026-56858",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-08-13T22:16:32.034590+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515838"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash (\u0027/\u0027), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user\u0027s browser, potentially compromising user data or actions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important cross-site scripting (XSS) vulnerability in the Go `html/template` package. Applications utilizing this package to render untrusted input are susceptible to arbitrary content injection due to a flaw in how pathological inputs are handled, potentially leading to client-side script execution.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515838",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515838"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56858",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/807100",
          "url": "https://go.dev/cl/807100"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80435",
          "url": "https://go.dev/issue/80435"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6091",
          "url": "https://pkg.go.dev/vuln/GO-2026-6091"
        }
      ],
      "release_date": "2026-08-13T21:58:53.354000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input"
    },
    {
      "cve": "CVE-2026-56859",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T22:16:52.493058+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515840"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important denial of service flaw affects applications utilizing the Go `encoding/xml` package. This vulnerability arises from an issue in XML decoding where a recursion depth counter fails to reset, potentially leading to stack exhaustion when processing malicious XML input.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515840",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515840"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56859",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803320",
          "url": "https://go.dev/cl/803320"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80481",
          "url": "https://go.dev/issue/80481"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6088",
          "url": "https://pkg.go.dev/vuln/GO-2026-6088"
        }
      ],
      "release_date": "2026-08-13T21:58:52.959000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue"
    },
    {
      "cve": "CVE-2026-59869",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-07-08T16:01:38.408322+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498122"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "js-yaml: js-yaml: Denial of Service via crafted YAML documents",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important. Red Hat products utilizing `js-yaml` to process untrusted YAML input are susceptible to a denial of service, as a remote attacker can provide a crafted document that consumes excessive CPU resources. This is considered Important due to the potential for service disruption without requiring authentication or complex attack vectors.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59869"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498122",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498122"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59869",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59869"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7",
          "url": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4",
          "url": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m",
          "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"
        }
      ],
      "release_date": "2026-07-08T15:15:54.675000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        },
        {
          "category": "workaround",
          "details": "To reduce exposure, restrict the processing of untrusted YAML documents by applications that rely on `js-yaml`. Implement robust input validation and sanitization for all YAML data originating from external or untrusted sources. Consider limiting network access to services that parse YAML content to trusted networks or clients through appropriate firewall configurations.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "js-yaml: js-yaml: Denial of Service via crafted YAML documents"
    },
    {
      "cve": "CVE-2026-69152",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-03T18:01:13.566423+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510722"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Any applications that pass user-controlled input to the `expand()` function are vulnerable to this issue. This flaw can result in an excessive consumption of memory that eventually terminates the process or blocks the event loop, both causing a denial of service. As this vulnerability allows a remote attacker to cause a denial of service, it has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510722",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510722"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-69152",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69152",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d",
          "url": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac",
          "url": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf",
          "url": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031",
          "url": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895",
          "url": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895"
        }
      ],
      "release_date": "2026-08-03T16:33:36.324000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, do not pass untrusted input to the expand() function.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation"
    },
    {
      "cve": "CVE-2026-71556",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "discovery_date": "2026-08-07T16:51:14.251077+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2512562"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in go-git, an extensible Git implementation library. Worktree operations, such as checkout, status, and add, resolve symbolic links within the working tree without proper boundary confinement. This allows a remote attacker to craft a malicious repository containing a symlink, which, when cloned and its worktree operations are used, can lead to reading from or writing to arbitrary files outside the intended working directory. This could result in information disclosure or arbitrary file modification.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "go-git is a pure-Go implementation of Git. During worktree operations (checkout, status, add), go-git resolves symbolic links without confining resolution to the worktree boundary, so a maliciously crafted repository containing a symlink can cause a consuming application to read from or write to files outside the intended working directory when that repository is cloned and its worktree operations are used. Exploitation requires the application to clone an attacker-controlled repository and then perform worktree operations against it; applications that only process trusted repositories are not exposed. Red Hat rates the impact of this flaw as Important.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-71556"
        },
        {
          "category": "external",
          "summary": "RHBZ#2512562",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512562"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-71556",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-71556"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-71556",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-71556"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/commit/008a78f2dd86f52544ddff8b8e8ddeecdf3f7aab",
          "url": "https://github.com/go-git/go-git/commit/008a78f2dd86f52544ddff8b8e8ddeecdf3f7aab"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/commit/661d1c7f101d34e002a3cfcf8dbea5b7421d07ac",
          "url": "https://github.com/go-git/go-git/commit/661d1c7f101d34e002a3cfcf8dbea5b7421d07ac"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/releases/tag/v5.19.2",
          "url": "https://github.com/go-git/go-git/releases/tag/v5.19.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/releases/tag/v6.0.0-alpha.5",
          "url": "https://github.com/go-git/go-git/releases/tag/v6.0.0-alpha.5"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/security/advisories/GHSA-hc8v-wwc9-vgxm",
          "url": "https://github.com/go-git/go-git/security/advisories/GHSA-hc8v-wwc9-vgxm"
        }
      ],
      "release_date": "2026-08-07T16:37:40.058000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        },
        {
          "category": "workaround",
          "details": "To reduce the risk of exploitation, do not clone or run worktree operations (checkout, status, add) on Git repositories originating from untrusted or attacker-controllable sources using an affected version of go-git. The issue is resolved by updating to go-git 5.19.2 or 6.0.0-alpha.5 (or later).",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution"
    },
    {
      "cve": "CVE-2026-73088",
      "cwe": {
        "id": "CWE-915",
        "name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
      },
      "discovery_date": "2026-08-11T17:11:53.228719+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2514177"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Browserslist, a tool for sharing browser and Node.js versions. An attacker could provide specially crafted statistics data, which the tool processes without proper validation. This improper handling of untrusted data can lead to prototype pollution, potentially causing the application to crash and resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "browserslist: Browserslist: Prototype pollution leading to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important vulnerability. The browserslist package, a front-end development tool, is vulnerable to prototype pollution when processing untrusted statistics data. This flaw can lead to a denial of service, as malicious input can crash applications that use the affected library. The impact is considered Important due to the potential for remote exploitation without authentication or user interaction, directly affecting service availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73088"
        },
        {
          "category": "external",
          "summary": "RHBZ#2514177",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514177"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73088",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73088"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73088",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73088"
        },
        {
          "category": "external",
          "summary": "https://github.com/browserslist/browserslist/commit/f9914ad9effc865ccc27d816255625890b31ca51",
          "url": "https://github.com/browserslist/browserslist/commit/f9914ad9effc865ccc27d816255625890b31ca51"
        },
        {
          "category": "external",
          "summary": "https://github.com/browserslist/browserslist/releases/tag/4.28.7",
          "url": "https://github.com/browserslist/browserslist/releases/tag/4.28.7"
        },
        {
          "category": "external",
          "summary": "https://github.com/browserslist/browserslist/security/advisories/GHSA-73wf-gq98-2v4g",
          "url": "https://github.com/browserslist/browserslist/security/advisories/GHSA-73wf-gq98-2v4g"
        }
      ],
      "release_date": "2026-08-11T17:00:05.869000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        },
        {
          "category": "workaround",
          "details": "To reduce exposure, ensure that the `browserslist` tool processes only trusted `browserslist-stats.json`, `opts.stats`, and CLI `--stats` data. Avoid using the tool with untrusted input sources in development or build environments. If `browserslist` is integrated into automated pipelines, validate all input data originates from trusted sources.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "browserslist: Browserslist: Prototype pollution leading to denial of service"
    },
    {
      "cve": "CVE-2026-73089",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-11T17:12:48.012036+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2514195"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Browserslist, a configuration tool for front-end development. An attacker can exploit this vulnerability by influencing repeated query values, leading to unbounded memory growth. This issue can cause the application to consume excessive memory, resulting in an out-of-memory process crash and a Denial of Service (DoS) for affected systems.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "browserslist: Browserslist: Denial of Service via unbounded memory growth from distinct query results",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `browserslist` library, which is used across several Red Hat products and services. The flaw allows an attacker to trigger unbounded memory growth by influencing query values, potentially leading to an out-of-memory crash and service unavailability. This is considered Important due to the potential for remote exploitation and significant impact on service stability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73089"
        },
        {
          "category": "external",
          "summary": "RHBZ#2514195",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514195"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73089",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73089"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73089",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73089"
        },
        {
          "category": "external",
          "summary": "https://github.com/browserslist/browserslist/commit/f2931a3ff2a3a31abf84ef01a7400b270aad6405",
          "url": "https://github.com/browserslist/browserslist/commit/f2931a3ff2a3a31abf84ef01a7400b270aad6405"
        },
        {
          "category": "external",
          "summary": "https://github.com/browserslist/browserslist/releases/tag/4.28.7",
          "url": "https://github.com/browserslist/browserslist/releases/tag/4.28.7"
        },
        {
          "category": "external",
          "summary": "https://github.com/browserslist/browserslist/security/advisories/GHSA-c83g-rgw3-j3cx",
          "url": "https://github.com/browserslist/browserslist/security/advisories/GHSA-c83g-rgw3-j3cx"
        }
      ],
      "release_date": "2026-08-11T17:05:38.760000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "browserslist: Browserslist: Denial of Service via unbounded memory growth from distinct query results"
    },
    {
      "cve": "CVE-2026-73643",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "discovery_date": "2026-08-13T18:11:25.926202+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515531"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in js-yaml, a JavaScript YAML parser. A remote attacker could exploit this vulnerability by providing specially crafted YAML input containing nested flow collections. This can lead to exponential parsing time when the application processes untrusted input, consuming excessive CPU resources. This resource exhaustion can block the Node.js event loop and cause a Denial of Service (DoS) for the affected process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "js-yaml: js-yaml: Denial of Service via exponential parsing in flow collections",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial-of-service flaw in the `js-yaml` library, where processing specially crafted YAML input can lead to exponential parsing time. This can cause applications utilizing affected versions of `js-yaml` within Red Hat products to consume excessive CPU resources, potentially blocking the Node.js event loop and leading to service unavailability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73643"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515531",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515531"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73643",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73643"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73643",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73643"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/3e5240f9cbe645ce5afb58524954a13c8539c853",
          "url": "https://github.com/nodeca/js-yaml/commit/3e5240f9cbe645ce5afb58524954a13c8539c853"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-pm4m-ph32-ghv5",
          "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-pm4m-ph32-ghv5"
        }
      ],
      "release_date": "2026-08-13T17:47:30.404000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict applications from processing untrusted YAML input with affected versions of the `js-yaml` library. Implement strict input validation to ensure that only trusted and well-formed YAML data is processed. If the application is exposed to external, untrusted sources, consider isolating the application or implementing additional resource limits to prevent complete service disruption.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "js-yaml: js-yaml: Denial of Service via exponential parsing in flow collections"
    },
    {
      "cve": "CVE-2026-75899",
      "cwe": {
        "id": "CWE-140",
        "name": "Improper Neutralization of Delimiters"
      },
      "discovery_date": "2026-08-24T09:51:05.559475+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521778"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri, a URI parser for Node.js. The component incorrectly decodes percent escapes in a hostname twice during URI parsing and authority recomposition. This double decoding can allow a remote attacker to manipulate a URI to point to a different network destination, such as a loopback address. This vulnerability can lead to Server-Side Request Forgery (SSRF) and bypass host-based security policies.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in the `fast-uri` library, used by applications for URI parsing, allows for Server-Side Request Forgery (SSRF) and host-policy bypass. By crafting a doubly percent-encoded hostname in an untrusted HTTP-family URI, an attacker could redirect internal application requests to arbitrary network destinations, potentially bypassing security controls and accessing internal services. This risk is present in Red Hat products that process untrusted URIs using affected versions of `fast-uri`.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-75899"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521778",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521778"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-75899",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-75899"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-75899",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75899"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-fph4-wmhf-6fwf",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-fph4-wmhf-6fwf"
        }
      ],
      "release_date": "2026-08-24T09:40:19.801000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding"
    },
    {
      "cve": "CVE-2026-75931",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2026-08-24T09:51:02.191062+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521777"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri, a URI parser for Node.js. This vulnerability arises because the parser fails to consistently convert internationalized domain names (IDN) to their standard ASCII form when processing scheme-relative references. This inconsistency can lead to host confusion, where an application might validate a URI against a security policy using one hostname, but then resolve to a different, potentially malicious, hostname. This discrepancy could allow an attacker to bypass security policies and access unauthorized resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Host confusion via skipped IDN canonicalization",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-75931"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521777",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521777"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-75931",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-75931"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-75931",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75931"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8"
        }
      ],
      "release_date": "2026-08-24T09:30:04.212000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Host confusion via skipped IDN canonicalization"
    },
    {
      "cve": "CVE-2026-75975",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2026-08-24T10:11:05.356309+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521779"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri, a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not fully validate the IPv6 grammar, allowing invalid trailing text in an authority to be silently discarded. This can lead to a malformed, attacker-controlled host being normalized into a different, valid IPv6 destination, such as a local or private IPv6 target. An application normalizing untrusted URLs before outbound requests, redirects, or proxy routing could be redirected, resulting in a server-side request forgery (SSRF) and address-policy bypass.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-75975"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521779",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521779"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-75975",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-75975"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-75975",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75975"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-f65p-4m7j-42xc",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-f65p-4m7j-42xc"
        }
      ],
      "release_date": "2026-08-24T09:58:07.698000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization"
    },
    {
      "cve": "CVE-2026-76172",
      "cwe": {
        "id": "CWE-76",
        "name": "Improper Neutralization of Equivalent Special Elements"
      },
      "discovery_date": "2026-08-24T10:31:12.887477+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521798"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri, a software component used for parsing Uniform Resource Identifiers (URIs) in Node.js applications. This vulnerability arises from an issue in how fast-uri processes the scheme part of a URI, specifically when it contains special characters that are percent-encoded. An attacker can exploit this by crafting a malicious URI, causing the parser to misinterpret the host, which can lead to serious security risks. These risks include unauthorized redirection to external websites, server-side request forgery (SSRF) where the application makes unintended requests to internal or external resources, and bypassing security policies.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-76172"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521798",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521798"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-76172",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-76172"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-76172",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76172"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-jqff-g426-hqxp",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-jqff-g426-hqxp"
        }
      ],
      "release_date": "2026-08-24T10:07:56.440000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects"
    },
    {
      "cve": "CVE-2026-81521",
      "cwe": {
        "id": "CWE-791",
        "name": "Incomplete Filtering of Special Elements"
      },
      "discovery_date": "2026-08-27T20:16:51.506209+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2525215"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the MongoDB Go Driver. The `Client.BulkWrite` operation does not properly validate database names, allowing a specially crafted name with reserved characters to redirect write operations. This vulnerability could enable an attacker to modify or corrupt data in unintended databases and collections.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "go.mongodb.org/mongo-driver: MongoDB Go Driver: Write redirection via unvalidated database name in Client.BulkWrite",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-81521"
        },
        {
          "category": "external",
          "summary": "RHBZ#2525215",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525215"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-81521",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-81521"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-81521",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81521"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/go.mongodb.org/mongo-driver/v2@v2.8.2",
          "url": "https://pkg.go.dev/go.mongodb.org/mongo-driver/v2@v2.8.2"
        }
      ],
      "release_date": "2026-08-27T18:31:45.450000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "go.mongodb.org/mongo-driver: MongoDB Go Driver: Write redirection via unvalidated database name in Client.BulkWrite"
    },
    {
      "cve": "CVE-2026-84292",
      "cwe": {
        "id": "CWE-140",
        "name": "Improper Neutralization of Delimiters"
      },
      "discovery_date": "2026-09-02T20:21:15.599288+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2527747"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri. This component improperly serializes the port component of a Uniform Resource Identifier (URI) without validating its content. A remote attacker can exploit this by crafting a malicious port value that injects authority delimiters. This manipulation can demote the intended host to user information and redirect the authority to an attacker-controlled host, leading to information disclosure as applications interpret the attacker\u0027s host as legitimate.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw. Applications utilizing the `fast-uri` library in Red Hat environments are susceptible to authority injection if they process untrusted data as the port component of a URI. This could allow an attacker to redirect network traffic to an arbitrary host, compromising communication integrity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84292"
        },
        {
          "category": "external",
          "summary": "RHBZ#2527747",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527747"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84292",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84292"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84292",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84292"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3"
        }
      ],
      "release_date": "2026-09-02T20:09:51.415000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization"
    },
    {
      "cve": "CVE-2026-84375",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-09-01T21:51:30.205823+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2527118"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in js-yaml, a JavaScript YAML parser. An attacker can exploit this by providing a specially crafted YAML document that causes the parser to perform excessive processing when handling merge keys with empty sources. This can lead to prolonged CPU consumption, effectively causing a denial of service (DoS) for applications that process untrusted YAML input.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in js-yaml, affecting applications that process untrusted YAML input. The flaw allows an attacker to craft a small YAML document that, when parsed, can lead to prolonged CPU consumption due to inefficient merge key processing, potentially exhausting system resources. This is particularly relevant where applications handle external YAML data and have merge processing enabled by default.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84375"
        },
        {
          "category": "external",
          "summary": "RHBZ#2527118",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527118"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84375",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84375"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84375",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84375"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639",
          "url": "https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/6a8e05f9a485188ed730ac81e81ae221352ef480",
          "url": "https://github.com/nodeca/js-yaml/commit/6a8e05f9a485188ed730ac81e81ae221352ef480"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/d90b6612a5a84385bdcb556c44578eac76dc0f6b",
          "url": "https://github.com/nodeca/js-yaml/commit/d90b6612a5a84385bdcb556c44578eac76dc0f6b"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/pull/797",
          "url": "https://github.com/nodeca/js-yaml/pull/797"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.2",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.2",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-2883-xcg3-v3hh",
          "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-2883-xcg3-v3hh"
        }
      ],
      "release_date": "2026-09-01T21:43:13.617000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing"
    },
    {
      "cve": "CVE-2026-84394",
      "cwe": {
        "id": "CWE-1289",
        "name": "Improper Validation of Unsafe Equivalence in Input"
      },
      "discovery_date": "2026-09-02T20:31:21.036047+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2527756"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri. The library incorrectly processes Uniform Resource Identifier (URI) hosts containing unbalanced brackets, leading to a discrepancy in how the host is parsed by fast-uri compared to other HTTP clients. This host confusion can allow an attacker to bypass security policies, such as Server-Side Request Forgery (SSRF) denylists or redirect allowlists, by causing an application to evaluate its policy against an incorrect host string. This could result in unintended network requests or access to unauthorized resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is rated Moderate because successful exploitation requires a specific configuration where fast-uri handles security checks but a different client resolves the URL, enabling security policy bypasses without direct code execution. This affects fast-uri versions 2.4.5, 3.1.6, and 4.1.3 (fixed in 2.4.6, 3.1.7, and 4.1.4).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
        ],
        "known_not_affected": [
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
          "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84394"
        },
        {
          "category": "external",
          "summary": "RHBZ#2527756",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527756"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84394",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84394"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84394",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84394"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-58mr-gqgx-xq4g",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-58mr-gqgx-xq4g"
        }
      ],
      "release_date": "2026-09-02T20:25:35.399000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:11:03+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68253"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:8eeea362be347d270710e86ef5dee31b8b9cd5e3b15a51b1258aeca65f26a3b7_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e53c0e3dd8f5a1143f68a8de71b482f4d8d7d3ef396600386f85245b01f0edb6_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:70048407630a264c09823ddbf8af4dd60c8b2c47b8c7f23afa90e7a5640033ee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:72afdd84d055d32c001a229aca8205fc31473f2725484591777cd8bbb1827078_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:37a4d17111ff87b669602992a1a03bf3ccc06bc3d35205ff3b5546a7be334b1f_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:612957b7d51455605d78e8c3aee8e85bedd72e2f6226d0b36fed49249a5faaee_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac3703c0bd8c3656abc4ee6f42e6319f50bc3307b3a59719fbabbbe53b931da5_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:af270ba4a70e320b903796bbee4287b1c9bf63a651222375d01c7267c580f802_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:131a1ef7f4827997e88c21ec6cdcc335938309c27bb3494be75df7a48da54e3c_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5eef392ec5e02ce9c0dac063fc10939e5372a67c1e4ce07c53a0b10a540b92fe_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:71f79cd1d7c052b559c88757461de172e270ad09868b8dd93ea49f4bfe190ac6_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:fc99de2ea21deb0de1dda7ce4b1859b7fde1a2215db6e37d1832612f2f4fd6ac_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:709386165bae873dd1fdab6a02b2b2e0565799244f9776ede6d163419e591be7_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:e0c41a3fd0535a76b2ab9f2807ff52019ca24866e984409fd13e17fc1ccdafc3_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:04f7f30f70d42d112149432339b5f937e19d5e23162e423bd807a7d873f0bdf2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7be1622f2bc5b9e716b7383f21e599ef75b60ae51b0d204fd2a5867b16bea794_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:2bf9f0ee955940c9bcf004ad4bcdbd456c9611f047660c5fcda910f262180aa4_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:c3ef52a4fe319130fb8e53c8def77a8c6b4075fa9e06d6df728db66743bf5137_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:0fe6bd2d1e06ceb24c7046e3c2b097e38106770355a54d122aa933c3d2856048_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:d36b9e9db3fbfd430974680bd378fcd0464c1daef109d987374d3a9e95647bd2_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:662ade5cd4939cfa4d84988829f35e208cc130923d6ded14dec84fd2cb9c0fcc_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:cabc41da9e58595c2e983e3e85fd0ea0f6f47ce3492d3c8c6794994601b5d0e1_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:a07805d660a53ca7e440e86bc029cb9071cff7fd5f95e6cccb5232279fb10e22_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:c871ea8df5f1d2aa64c8b41402e64360f3f6d5bf7280bcb139c5916e85e858b0_arm64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:3bc593de4c4041cff17548c3f1c7d09c0fbd7996787c7c70505b9a0e982a356a_amd64",
            "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:8262517a827566c40552a7ee633fcb41c531d8947be975e8864e13ecd718e7c7_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.