RHSA-2026:84491

Vulnerability from csaf_redhat - Published: 2026-10-18 15:17 - Updated: 2026-10-19 17:38
Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Severity
Important
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs: dotnet10.0: * aspnetcore-runtime-10.0-10.0.13-1.hum1 (aarch64, s390x, x86_64) * aspnetcore-runtime-dbg-10.0-10.0.13-1.hum1 (aarch64, s390x, x86_64) * aspnetcore-targeting-pack-10.0-10.0.13-1.hum1 (aarch64, s390x, x86_64) * dotnet-apphost-pack-10.0-10.0.13-1.hum1 (aarch64, s390x, x86_64) * dotnet-host-10.0.13-1.hum1 (aarch64, s390x, x86_64) * dotnet-hostfxr-10.0-10.0.13-1.hum1 (aarch64, s390x, x86_64) * dotnet-runtime-10.0-10.0.13-1.hum1 (aarch64, s390x, x86_64) * dotnet-runtime-dbg-10.0-10.0.13-1.hum1 (aarch64, s390x, x86_64) * dotnet-sdk-10.0-10.0.113-1.hum1 (aarch64, s390x, x86_64) * dotnet-sdk-10.0-source-built-artifacts-10.0.113-1.hum1 (aarch64, s390x, x86_64) * dotnet-sdk-aot-10.0-10.0.113-1.hum1 (aarch64, x86_64) * dotnet-sdk-dbg-10.0-10.0.113-1.hum1 (aarch64, s390x, x86_64) * dotnet-targeting-pack-10.0-10.0.13-1.hum1 (aarch64, s390x, x86_64) * dotnet-templates-10.0-10.0.113-1.hum1 (aarch64, s390x, x86_64) * dotnet10.0-10.0.113-1.hum1.src (src)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-58280

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@aarch64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@s390x —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@x86_64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@aarch64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@s390x —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@x86_64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@aarch64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@x86_64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@aarch64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@s390x —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@x86_64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@aarch64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@s390x —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@x86_64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet10.0-0:10.0.113-1.hum1@src —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@aarch64 —
Unresolved product id: Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@s390x —
Unresolved product id: Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@x86_64 —
Unresolved product id: Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64 —
Unresolved product id: Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x —
Unresolved product id: Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64 —
Unresolved product id: Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64 —
Unresolved product id: Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@s390x —
Unresolved product id: Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64 —
Unresolved product id: Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@aarch64 —
Unresolved product id: Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@s390x —
Unresolved product id: Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@x86_64 —
Unresolved product id: Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@aarch64 —
Unresolved product id: Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@s390x —
Unresolved product id: Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@x86_64 —
Unresolved product id: Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@aarch64 —
Unresolved product id: Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@s390x —
Unresolved product id: Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@x86_64 —
Unresolved product id: Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@aarch64 —
Unresolved product id: Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@s390x —
Unresolved product id: Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@x86_64 —
Unresolved product id: Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64 —
Unresolved product id: Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x —
Unresolved product id: Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64 —
Unresolved product id: Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64 —
Unresolved product id: Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@s390x —
Unresolved product id: Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64 —
Threats
Impact Important
CVE-2026-66822

Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.

5.9 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-201 - Insertion of Sensitive Information Into Sent Data
Affected products
Fixed 15 products, the same list as for CVE-2026-58280
Known not affected 27 products, the same list as for CVE-2026-58280
Threats
Impact Moderate
CVE-2026-69651

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Affected products
Fixed 15 products, the same list as for CVE-2026-58280
Known not affected 27 products, the same list as for CVE-2026-58280
Threats
Impact Important
CVE-2026-70159

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 15 products, the same list as for CVE-2026-58280
Known not affected 27 products, the same list as for CVE-2026-58280
Threats
Impact Important
CVE-2026-96957

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-347 - Improper Verification of Cryptographic Signature
Affected products
Fixed 15 products, the same list as for CVE-2026-58280
Known not affected 27 products, the same list as for CVE-2026-58280
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:84491 self
https://images.redhat.com/ external
https://access.redhat.com/security/cve/CVE-2026-70159 external
https://access.redhat.com/security/updates/classi… external
https://access.redhat.com/security/cve/CVE-2026-58280 external
https://access.redhat.com/security/cve/CVE-2026-96957 external
https://access.redhat.com/security/cve/CVE-2026-69651 external
https://access.redhat.com/security/cve/CVE-2026-66822 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-58280 self
https://bugzilla.redhat.com/show_bug.cgi?id=2548778 external
https://www.cve.org/CVERecord?id=CVE-2026-58280 external
https://nvd.nist.gov/vuln/detail/CVE-2026-58280 external
https://access.redhat.com/security/cve/CVE-2026-66822 self
https://bugzilla.redhat.com/show_bug.cgi?id=2548781 external
https://www.cve.org/CVERecord?id=CVE-2026-66822 external
https://nvd.nist.gov/vuln/detail/CVE-2026-66822 external
https://access.redhat.com/security/cve/CVE-2026-69651 self
https://bugzilla.redhat.com/show_bug.cgi?id=2548784 external
https://www.cve.org/CVERecord?id=CVE-2026-69651 external
https://nvd.nist.gov/vuln/detail/CVE-2026-69651 external
https://access.redhat.com/security/cve/CVE-2026-70159 self
https://bugzilla.redhat.com/show_bug.cgi?id=2548786 external
https://www.cve.org/CVERecord?id=CVE-2026-70159 external
https://nvd.nist.gov/vuln/detail/CVE-2026-70159 external
https://access.redhat.com/security/cve/CVE-2026-96957 self
https://bugzilla.redhat.com/show_bug.cgi?id=2548813 external
https://www.cve.org/CVERecord?id=CVE-2026-96957 external
https://nvd.nist.gov/vuln/detail/CVE-2026-96957 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Hardened Images RPMs is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This update includes the following RPMs:\n\ndotnet10.0:\n  * aspnetcore-runtime-10.0-10.0.13-1.hum1 (aarch64, s390x, x86_64)\n  * aspnetcore-runtime-dbg-10.0-10.0.13-1.hum1 (aarch64, s390x, x86_64)\n  * aspnetcore-targeting-pack-10.0-10.0.13-1.hum1 (aarch64, s390x, x86_64)\n  * dotnet-apphost-pack-10.0-10.0.13-1.hum1 (aarch64, s390x, x86_64)\n  * dotnet-host-10.0.13-1.hum1 (aarch64, s390x, x86_64)\n  * dotnet-hostfxr-10.0-10.0.13-1.hum1 (aarch64, s390x, x86_64)\n  * dotnet-runtime-10.0-10.0.13-1.hum1 (aarch64, s390x, x86_64)\n  * dotnet-runtime-dbg-10.0-10.0.13-1.hum1 (aarch64, s390x, x86_64)\n  * dotnet-sdk-10.0-10.0.113-1.hum1 (aarch64, s390x, x86_64)\n  * dotnet-sdk-10.0-source-built-artifacts-10.0.113-1.hum1 (aarch64, s390x, x86_64)\n  * dotnet-sdk-aot-10.0-10.0.113-1.hum1 (aarch64, x86_64)\n  * dotnet-sdk-dbg-10.0-10.0.113-1.hum1 (aarch64, s390x, x86_64)\n  * dotnet-targeting-pack-10.0-10.0.13-1.hum1 (aarch64, s390x, x86_64)\n  * dotnet-templates-10.0-10.0.113-1.hum1 (aarch64, s390x, x86_64)\n  * dotnet10.0-10.0.113-1.hum1.src (src)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:84491",
        "url": "https://access.redhat.com/errata/RHSA-2026:84491"
      },
      {
        "category": "external",
        "summary": "https://images.redhat.com/",
        "url": "https://images.redhat.com/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-70159",
        "url": "https://access.redhat.com/security/cve/CVE-2026-70159"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-58280",
        "url": "https://access.redhat.com/security/cve/CVE-2026-58280"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-96957",
        "url": "https://access.redhat.com/security/cve/CVE-2026-96957"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-69651",
        "url": "https://access.redhat.com/security/cve/CVE-2026-69651"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-66822",
        "url": "https://access.redhat.com/security/cve/CVE-2026-66822"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_84491.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
    "tracking": {
      "current_release_date": "2026-10-19T17:38:40+00:00",
      "generator": {
        "date": "2026-10-19T17:38:40+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.2"
        }
      },
      "id": "RHSA-2026:84491",
      "initial_release_date": "2026-10-18T15:17:28+00:00",
      "revision_history": [
        {
          "date": "2026-10-18T15:17:28+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-19T11:51:14+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-19T17:38:40+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Hardened Images",
                "product": {
                  "name": "Red Hat Hardened Images",
                  "product_id": "Red Hat Hardened Images",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:hummingbird:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Hardened Images"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-10.0-0:10.0.13-1.hum1@aarch64",
                "product": {
                  "name": "aspnetcore-runtime-10.0-0:10.0.13-1.hum1@aarch64",
                  "product_id": "aspnetcore-runtime-10.0-0:10.0.13-1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-10.0@10.0.13-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
                "product": {
                  "name": "aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
                  "product_id": "aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-10.0@10.0.13-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
                "product": {
                  "name": "aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
                  "product_id": "aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-10.0@10.0.13-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@aarch64",
                "product": {
                  "name": "dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@aarch64",
                  "product_id": "dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-10.0@10.0.13-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-0:10.0.13-1.hum1@aarch64",
                "product": {
                  "name": "dotnet-host-0:10.0.13-1.hum1@aarch64",
                  "product_id": "dotnet-host-0:10.0.13-1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host@10.0.13-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-10.0-0:10.0.13-1.hum1@aarch64",
                "product": {
                  "name": "dotnet-hostfxr-10.0-0:10.0.13-1.hum1@aarch64",
                  "product_id": "dotnet-hostfxr-10.0-0:10.0.13-1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-10.0@10.0.13-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-10.0-0:10.0.13-1.hum1@aarch64",
                "product": {
                  "name": "dotnet-runtime-10.0-0:10.0.13-1.hum1@aarch64",
                  "product_id": "dotnet-runtime-10.0-0:10.0.13-1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-10.0@10.0.13-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
                "product": {
                  "name": "dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
                  "product_id": "dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-dbg-10.0@10.0.13-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-10.0-0:10.0.113-1.hum1@aarch64",
                "product": {
                  "name": "dotnet-sdk-10.0-0:10.0.113-1.hum1@aarch64",
                  "product_id": "dotnet-sdk-10.0-0:10.0.113-1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-10.0@10.0.113-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@aarch64",
                "product": {
                  "name": "dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@aarch64",
                  "product_id": "dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-10.0-source-built-artifacts@10.0.113-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@aarch64",
                "product": {
                  "name": "dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@aarch64",
                  "product_id": "dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-aot-10.0@10.0.113-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@aarch64",
                "product": {
                  "name": "dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@aarch64",
                  "product_id": "dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-dbg-10.0@10.0.113-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
                "product": {
                  "name": "dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
                  "product_id": "dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-targeting-pack-10.0@10.0.13-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-templates-10.0-0:10.0.113-1.hum1@aarch64",
                "product": {
                  "name": "dotnet-templates-10.0-0:10.0.113-1.hum1@aarch64",
                  "product_id": "dotnet-templates-10.0-0:10.0.113-1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-templates-10.0@10.0.113-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-10.0-0:10.0.13-1.hum1@s390x",
                "product": {
                  "name": "aspnetcore-runtime-10.0-0:10.0.13-1.hum1@s390x",
                  "product_id": "aspnetcore-runtime-10.0-0:10.0.13-1.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-10.0@10.0.13-1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
                "product": {
                  "name": "aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
                  "product_id": "aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-10.0@10.0.13-1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
                "product": {
                  "name": "aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
                  "product_id": "aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-10.0@10.0.13-1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@s390x",
                "product": {
                  "name": "dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@s390x",
                  "product_id": "dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-10.0@10.0.13-1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-0:10.0.13-1.hum1@s390x",
                "product": {
                  "name": "dotnet-host-0:10.0.13-1.hum1@s390x",
                  "product_id": "dotnet-host-0:10.0.13-1.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host@10.0.13-1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-10.0-0:10.0.13-1.hum1@s390x",
                "product": {
                  "name": "dotnet-hostfxr-10.0-0:10.0.13-1.hum1@s390x",
                  "product_id": "dotnet-hostfxr-10.0-0:10.0.13-1.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-10.0@10.0.13-1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-10.0-0:10.0.13-1.hum1@s390x",
                "product": {
                  "name": "dotnet-runtime-10.0-0:10.0.13-1.hum1@s390x",
                  "product_id": "dotnet-runtime-10.0-0:10.0.13-1.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-10.0@10.0.13-1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
                "product": {
                  "name": "dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
                  "product_id": "dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-dbg-10.0@10.0.13-1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-10.0-0:10.0.113-1.hum1@s390x",
                "product": {
                  "name": "dotnet-sdk-10.0-0:10.0.113-1.hum1@s390x",
                  "product_id": "dotnet-sdk-10.0-0:10.0.113-1.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-10.0@10.0.113-1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@s390x",
                "product": {
                  "name": "dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@s390x",
                  "product_id": "dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-10.0-source-built-artifacts@10.0.113-1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@s390x",
                "product": {
                  "name": "dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@s390x",
                  "product_id": "dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-dbg-10.0@10.0.113-1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
                "product": {
                  "name": "dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
                  "product_id": "dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-targeting-pack-10.0@10.0.13-1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-templates-10.0-0:10.0.113-1.hum1@s390x",
                "product": {
                  "name": "dotnet-templates-10.0-0:10.0.113-1.hum1@s390x",
                  "product_id": "dotnet-templates-10.0-0:10.0.113-1.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-templates-10.0@10.0.113-1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-10.0-0:10.0.13-1.hum1@x86_64",
                "product": {
                  "name": "aspnetcore-runtime-10.0-0:10.0.13-1.hum1@x86_64",
                  "product_id": "aspnetcore-runtime-10.0-0:10.0.13-1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-10.0@10.0.13-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
                "product": {
                  "name": "aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
                  "product_id": "aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-10.0@10.0.13-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
                "product": {
                  "name": "aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
                  "product_id": "aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-10.0@10.0.13-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@x86_64",
                "product": {
                  "name": "dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@x86_64",
                  "product_id": "dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-10.0@10.0.13-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-0:10.0.13-1.hum1@x86_64",
                "product": {
                  "name": "dotnet-host-0:10.0.13-1.hum1@x86_64",
                  "product_id": "dotnet-host-0:10.0.13-1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host@10.0.13-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-10.0-0:10.0.13-1.hum1@x86_64",
                "product": {
                  "name": "dotnet-hostfxr-10.0-0:10.0.13-1.hum1@x86_64",
                  "product_id": "dotnet-hostfxr-10.0-0:10.0.13-1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-10.0@10.0.13-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-10.0-0:10.0.13-1.hum1@x86_64",
                "product": {
                  "name": "dotnet-runtime-10.0-0:10.0.13-1.hum1@x86_64",
                  "product_id": "dotnet-runtime-10.0-0:10.0.13-1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-10.0@10.0.13-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
                "product": {
                  "name": "dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
                  "product_id": "dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-dbg-10.0@10.0.13-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-10.0-0:10.0.113-1.hum1@x86_64",
                "product": {
                  "name": "dotnet-sdk-10.0-0:10.0.113-1.hum1@x86_64",
                  "product_id": "dotnet-sdk-10.0-0:10.0.113-1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-10.0@10.0.113-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@x86_64",
                "product": {
                  "name": "dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@x86_64",
                  "product_id": "dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-10.0-source-built-artifacts@10.0.113-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@x86_64",
                "product": {
                  "name": "dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@x86_64",
                  "product_id": "dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-aot-10.0@10.0.113-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@x86_64",
                "product": {
                  "name": "dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@x86_64",
                  "product_id": "dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-dbg-10.0@10.0.113-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
                "product": {
                  "name": "dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
                  "product_id": "dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-targeting-pack-10.0@10.0.13-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-templates-10.0-0:10.0.113-1.hum1@x86_64",
                "product": {
                  "name": "dotnet-templates-10.0-0:10.0.113-1.hum1@x86_64",
                  "product_id": "dotnet-templates-10.0-0:10.0.113-1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-templates-10.0@10.0.113-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dotnet10.0-0:10.0.113-1.hum1@src",
                "product": {
                  "name": "dotnet10.0-0:10.0.113-1.hum1@src",
                  "product_id": "dotnet10.0-0:10.0.113-1.hum1@src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet10.0@10.0.113-1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-10.0-0:10.0.13-1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@aarch64"
        },
        "product_reference": "aspnetcore-runtime-10.0-0:10.0.13-1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-10.0-0:10.0.13-1.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@s390x"
        },
        "product_reference": "aspnetcore-runtime-10.0-0:10.0.13-1.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-10.0-0:10.0.13-1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@x86_64"
        },
        "product_reference": "aspnetcore-runtime-10.0-0:10.0.13-1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64"
        },
        "product_reference": "aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x"
        },
        "product_reference": "aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64"
        },
        "product_reference": "aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64"
        },
        "product_reference": "aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@s390x"
        },
        "product_reference": "aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64"
        },
        "product_reference": "aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@aarch64"
        },
        "product_reference": "dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@s390x"
        },
        "product_reference": "dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@x86_64"
        },
        "product_reference": "dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-0:10.0.13-1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@aarch64"
        },
        "product_reference": "dotnet-host-0:10.0.13-1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-0:10.0.13-1.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@s390x"
        },
        "product_reference": "dotnet-host-0:10.0.13-1.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-0:10.0.13-1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@x86_64"
        },
        "product_reference": "dotnet-host-0:10.0.13-1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-10.0-0:10.0.13-1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@aarch64"
        },
        "product_reference": "dotnet-hostfxr-10.0-0:10.0.13-1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-10.0-0:10.0.13-1.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@s390x"
        },
        "product_reference": "dotnet-hostfxr-10.0-0:10.0.13-1.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-10.0-0:10.0.13-1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@x86_64"
        },
        "product_reference": "dotnet-hostfxr-10.0-0:10.0.13-1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-10.0-0:10.0.13-1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@aarch64"
        },
        "product_reference": "dotnet-runtime-10.0-0:10.0.13-1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-10.0-0:10.0.13-1.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@s390x"
        },
        "product_reference": "dotnet-runtime-10.0-0:10.0.13-1.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-10.0-0:10.0.13-1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@x86_64"
        },
        "product_reference": "dotnet-runtime-10.0-0:10.0.13-1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64"
        },
        "product_reference": "dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x"
        },
        "product_reference": "dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64"
        },
        "product_reference": "dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-10.0-0:10.0.113-1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@aarch64"
        },
        "product_reference": "dotnet-sdk-10.0-0:10.0.113-1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-10.0-0:10.0.113-1.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@s390x"
        },
        "product_reference": "dotnet-sdk-10.0-0:10.0.113-1.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-10.0-0:10.0.113-1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@x86_64"
        },
        "product_reference": "dotnet-sdk-10.0-0:10.0.113-1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@aarch64"
        },
        "product_reference": "dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@s390x"
        },
        "product_reference": "dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@x86_64"
        },
        "product_reference": "dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@aarch64"
        },
        "product_reference": "dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@x86_64"
        },
        "product_reference": "dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@aarch64"
        },
        "product_reference": "dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@s390x"
        },
        "product_reference": "dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@x86_64"
        },
        "product_reference": "dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64"
        },
        "product_reference": "dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@s390x"
        },
        "product_reference": "dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64"
        },
        "product_reference": "dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-10.0-0:10.0.113-1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@aarch64"
        },
        "product_reference": "dotnet-templates-10.0-0:10.0.113-1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-10.0-0:10.0.113-1.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@s390x"
        },
        "product_reference": "dotnet-templates-10.0-0:10.0.113-1.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-10.0-0:10.0.113-1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@x86_64"
        },
        "product_reference": "dotnet-templates-10.0-0:10.0.113-1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet10.0-0:10.0.113-1.hum1@src as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet10.0-0:10.0.113-1.hum1@src"
        },
        "product_reference": "dotnet10.0-0:10.0.113-1.hum1@src",
        "relates_to_product_reference": "Red Hat Hardened Images"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-58280",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-10-14T17:46:49+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548778"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet10.0-0:10.0.113-1.hum1@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-58280"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548778",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548778"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-58280",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-58280"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58280",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58280"
        }
      ],
      "release_date": "2026-10-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-18T15:17:28+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet10.0-0:10.0.113-1.hum1@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:84491"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet10.0-0:10.0.113-1.hum1@src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability"
    },
    {
      "cve": "CVE-2026-66822",
      "cwe": {
        "id": "CWE-201",
        "name": "Insertion of Sensitive Information Into Sent Data"
      },
      "discovery_date": "2026-10-14T17:46:49+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548781"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A moderate information disclosure vulnerability was found in the .NET runtime. When a .NET application using SocketsHttpHandler sends a request through a proxy that authenticates with basic credentials and the response is an HTTP redirect, the Proxy-Authorization header can be incorrectly retained and forwarded with the redirected request, leaking the basic proxy credentials to the destination server. This allows an unauthorized remote attacker to disclose sensitive proxy authentication information over a network. Red Hat rates this flaw Moderate severity with a CVSS 3.1 base score of 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N), consistent with the upstream assessment. All currently tracked Red Hat product streams shipping the affected dotnet8.0, dotnet9.0, and dotnet10.0 components, including Red Hat Enterprise Linux and Red Hat Hardened Images, are affected, and fixes are being pursued through the respective product channels.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet10.0-0:10.0.113-1.hum1@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-66822"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548781",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548781"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-66822",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-66822"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66822",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66822"
        }
      ],
      "release_date": "2026-10-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-18T15:17:28+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet10.0-0:10.0.113-1.hum1@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:84491"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet10.0-0:10.0.113-1.hum1@src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet10.0-0:10.0.113-1.hum1@src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerability"
    },
    {
      "cve": "CVE-2026-69651",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-10-14T17:46:49+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548784"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet10.0-0:10.0.113-1.hum1@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-69651"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548784",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548784"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-69651",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-69651"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69651",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69651"
        }
      ],
      "release_date": "2026-10-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-18T15:17:28+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet10.0-0:10.0.113-1.hum1@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:84491"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet10.0-0:10.0.113-1.hum1@src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability"
    },
    {
      "cve": "CVE-2026-70159",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-10-14T17:46:49+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548786"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet8.0: dotnet10.0: dotnet: dotnet9.0: ASP.NET Core Denial of Service Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet10.0-0:10.0.113-1.hum1@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-70159"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548786",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548786"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-70159",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-70159"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-70159",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70159"
        }
      ],
      "release_date": "2026-10-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-18T15:17:28+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet10.0-0:10.0.113-1.hum1@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:84491"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet10.0-0:10.0.113-1.hum1@src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet8.0: dotnet10.0: dotnet: dotnet9.0: ASP.NET Core Denial of Service Vulnerability"
    },
    {
      "cve": "CVE-2026-96957",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-10-12T16:05:58+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548813"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet10.0: dotnet: .NET Security Feature Bypass Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An IMPORTANT severity security feature bypass vulnerability was found in the .NET (dotnet10.0) packages shipped in Red Hat Enterprise Linux 8, 9, and 10, Red Hat In-Vehicle OS, and Red Hat Hardened Images. Improper verification of cryptographic signatures in .NET allows an unauthorized remote attacker, in a scenario requiring user interaction, to bypass a security feature: signature verification for .NET file-based apps can fail to enforce the expected trust decision, with potential impact on the confidentiality, integrity, and availability of the application\u0027s trust decisions. A fix for the affected Red Hat products is being pursued through the upstream .NET releases, to which resolution of this flaw is delegated. The dotnet8.0 component in Red Hat Hardened Images is not affected by this issue. Red Hat\u0027s severity rating of IMPORTANT (CVSS 3.1 score 8.8) is consistent with the upstream Microsoft assessment.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet10.0-0:10.0.113-1.hum1@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
          "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-96957"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548813",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548813"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-96957",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-96957"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-96957",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96957"
        }
      ],
      "release_date": "2026-10-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-18T15:17:28+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet10.0-0:10.0.113-1.hum1@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:84491"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet10.0-0:10.0.113-1.hum1@src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-runtime-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-apphost-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-host-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-hostfxr-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-runtime-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-runtime-dbg-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-10.0-source-built-artifacts-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-aot-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-sdk-dbg-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-targeting-pack-10.0-0:10.0.13-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@s390x",
            "Red Hat Hardened Images:dotnet-templates-10.0-0:10.0.113-1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet10.0-0:10.0.113-1.hum1@src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet10.0: dotnet: .NET Security Feature Bypass Vulnerability"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.