{
  "affected": [
    {
      "affectedData": [
        {
          "product": "net-imap",
          "vendor": "ruby",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 0.6.0, \u003c 0.6.4.1"
            },
            {
              "status": "affected",
              "version": "\u003c 0.5.15"
            }
          ]
        }
      ],
      "source": "security-advisories@github.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, when Net::IMAP#id is called with a hash argument, although the ID field value strings are correctly quoted (escaping quoted specials), they were not validated to prohibit CRLF sequences. While Net::IMAP#enable does process its arguments for aliases, it does not validate them as valid atoms (or as a list of valid atoms). The #to_s value is sent verbatim. Arguments to either command could be used by an attacker to inject arbitrary IMAP commands. This vulnerability is fixed in 0.6.5 and 0.5.15."
    }
  ],
  "id": "CVE-2026-47242",
  "lastModified": "2026-06-23T15:03:56.637",
  "metrics": {
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "PRESENT",
          "attackVector": "LOCAL",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 5.8,
          "baseSeverity": "MEDIUM",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "NONE",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "PASSIVE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "LOW",
          "vulnConfidentialityImpact": "NONE",
          "vulnIntegrityImpact": "HIGH",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-47242",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-06-23T12:06:42.230852Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-06-22T21:16:24.807",
  "references": [
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/ruby/net-imap/security/advisories/GHSA-46q3-7gv7-qmgg"
    }
  ],
  "sourceIdentifier": "security-advisories@github.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-77"
        },
        {
          "lang": "en",
          "value": "CWE-93"
        }
      ],
      "source": "security-advisories@github.com",
      "type": "Secondary"
    }
  ]
}

{
  "affected": [
    {
      "database_specific": {
        "last_known_affected_version_range": "\u003c= 0.6.4"
      },
      "package": {
        "ecosystem": "RubyGems",
        "name": "net-imap"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0.6.0"
            },
            {
              "fixed": "0.6.4.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "database_specific": {
        "last_known_affected_version_range": "\u003c= 0.5.14"
      },
      "package": {
        "ecosystem": "RubyGems",
        "name": "net-imap"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.5.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2026-47242"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-77",
      "CWE-93"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-06-09T20:31:52Z",
    "nvd_published_at": "2026-06-22T21:16:24Z",
    "severity": "MODERATE"
  },
  "details": "### Summary\n\nTwo `Net::IMAP` commands, `#id` and `#enable`, do not validate their arguments.  Arguments to either command could be used by an attacker to inject arbitrary IMAP commands.\n\nPlease note that passing untrusted inputs to these commands is usually inappropriate and expected to be uncommon.\n\n### Details\n\nWhen `Net::IMAP#id` is called with a hash argument, although the ID field value strings are correctly quoted (escaping quoted specials), they were not validated to prohibit CRLF sequences.\n\nWhile `Net::IMAP#enable` does process its arguments for aliases, it does not validate them as valid atoms (or as a list of valid atoms).  The `#to_s` value is sent verbatim.\n\n### Impact\n\nThis is expected to impact very few users: use of untrusted user input for either command is expected to be very uncommon.\n\nThe documentation for `#enable` explicitly warns that using any arguments that are not in the explicitly supported list may result in undocumented behavior.  Using arbitrary untrusted user input for `#enable` will always be inappropriate.\n\nAlthough client ID field values will most commonly be static and hardcoded, dynamic input sources may be used.  For example, client ID fields may be set by configuration or version numbers.  Using untrusted user inputs for client ID fields is expected to be uncommon.  But any untrusted inputs to client ID can trivially exploit this vulnerability.\n\nUntrusted inputs to either command may include a CRLF sequence followed by a new IMAP command (like DELETE mailbox). Although this does not directly enable data exfiltration, it could be combined with other attack vectors or knowledge of the target system\u0027s attributes, e.g.: shared mail folders or the application\u0027s installed response handlers.\n\n### Mitigation\n\nUpdate to a version of `net-imap` which validates `#id` and `#enable` arguments.\n\nUntrusted inputs should _never_ be used for `#enable` arguments.\n\nIf `net-imap` cannot be upgraded:\n* do not use untrusted inputs for client ID field values\n* or add validation that client ID field values must not contain any CR or LF bytes.",
  "id": "GHSA-46q3-7gv7-qmgg",
  "modified": "2026-07-06T22:54:06Z",
  "published": "2026-06-09T20:31:52Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/ruby/net-imap/security/advisories/GHSA-46q3-7gv7-qmgg"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47242"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/ruby/net-imap"
    },
    {
      "type": "WEB",
      "url": "https://github.com/ruby/net-imap/releases/tag/v0.6.4.1"
    },
    {
      "type": "WEB",
      "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/net-imap/CVE-2026-47242.yml"
    },
    {
      "type": "WEB",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47242"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N",
      "type": "CVSS_V4"
    }
  ],
  "summary": "Net::IMAP: Command Injection via ID command argument"
}

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2026-47242 Net::IMAP: Command Injection via ID command argument - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-47242.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Net::IMAP: Command Injection via ID command argument",
    "tracking": {
      "current_release_date": "2026-06-27T01:09:45.000Z",
      "generator": {
        "date": "2026-06-28T07:10:57.240Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2026-47242",
      "initial_release_date": "2026-06-02T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2026-06-27T01:09:45.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "3.0",
                "product": {
                  "name": "Azure Linux 3.0",
                  "product_id": "17084"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "azl3 ruby 0:3.3.5-8.azl3",
                "product": {
                  "name": "azl3 ruby 0:3.3.5-8.azl3",
                  "product_id": "1"
                }
              }
            ],
            "category": "product_name",
            "name": "ruby"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 ruby 0:3.3.5-8.azl3 as a component of Azure Linux 3.0",
          "product_id": "17084-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "17084"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-47242",
      "cwe": {
        "id": "CWE-77",
        "name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "general",
          "text": "GitHub_M",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "known_affected": [
          "17084-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-47242 Net::IMAP: Command Injection via ID command argument - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-47242.json"
        }
      ],
      "remediations": [
        {
          "category": "none_available",
          "date": "2026-06-27T01:09:45.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17084-1"
          ]
        }
      ],
      "title": "Net::IMAP: Command Injection via ID command argument"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Ruby ist eine interpretierte, objektorientierte Skriptsprache.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Ruby ausnutzen, um Informationen offenzulegen, um einen Denial of Service Angriff durchzuf\u00fchren, und um beliebigen Programmcode auszuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-2379 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2379.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-2379 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2379"
      },
      {
        "category": "external",
        "summary": "Ruby Release Notes vom 2026-07-15",
        "url": "https://www.ruby-lang.org/en/news/2026/07/16/ruby-3-3-12-released/"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-q2mw-fvj9-vvcw vom 2026-04-24",
        "url": "https://github.com/advisories/GHSA-q2mw-fvj9-vvcw"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-vcgp-9326-pqcp vom 2026-04-24",
        "url": "https://github.com/advisories/GHSA-vcgp-9326-pqcp"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-87pf-fpwv-p7m7 vom 2026-04-24",
        "url": "https://github.com/advisories/GHSA-87pf-fpwv-p7m7"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-hm49-wcqc-g2xg vom 2026-04-24",
        "url": "https://github.com/advisories/GHSA-hm49-wcqc-g2xg"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-75xq-5h9v-w6px vom 2026-04-24",
        "url": "https://github.com/advisories/GHSA-75xq-5h9v-w6px"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-8p34-64r3-mwg8 vom 2026-06-09",
        "url": "https://github.com/advisories/GHSA-8p34-64r3-mwg8"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-c4fp-cxrr-mj66 vom 2026-06-09",
        "url": "https://github.com/advisories/GHSA-c4fp-cxrr-mj66"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-46q3-7gv7-qmgg vom 2026-06-09",
        "url": "https://github.com/advisories/GHSA-46q3-7gv7-qmgg"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-8556-1 vom 2026-07-16",
        "url": "https://ubuntu.com/security/notices/USN-8556-1"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-33540 vom 2026-07-17",
        "url": "http://linux.oracle.com/errata/ELSA-2026-33540.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-20606 vom 2026-07-17",
        "url": "https://linux.oracle.com/errata/ELSA-2026-20606.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-33565 vom 2026-07-17",
        "url": "http://linux.oracle.com/errata/ELSA-2026-33565.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:3090-1 vom 2026-07-17",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027599.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7280602 vom 2026-07-21",
        "url": "https://www.ibm.com/support/pages/node/7280602"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:33512 vom 2026-07-29",
        "url": "https://errata.build.resf.org/RLSA-2026:33512"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-4716 vom 2026-08-04",
        "url": "https://lists.debian.org/debian-lts-announce/2026/08/msg00006.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:50728 vom 2026-08-05",
        "url": "https://access.redhat.com/errata/RHSA-2026:50728"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-50828 vom 2026-08-10",
        "url": "https://linux.oracle.com/errata/ELSA-2026-50828.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-50728 vom 2026-08-10",
        "url": "https://linux.oracle.com/errata/ELSA-2026-50728.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-50827 vom 2026-08-11",
        "url": "http://linux.oracle.com/errata/ELSA-2026-50827.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-37397 vom 2026-08-11",
        "url": "https://linux.oracle.com/errata/ELSA-2026-37397.html"
      }
    ],
    "source_lang": "en-US",
    "title": "Ruby: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-08-10T22:00:00.000+00:00",
      "generator": {
        "date": "2026-08-11T08:56:42.112+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.6.0"
        }
      },
      "id": "WID-SEC-W-2026-2379",
      "initial_release_date": "2026-07-15T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-07-15T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2026-07-16T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2026-07-19T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Oracle Linux und SUSE aufgenommen"
        },
        {
          "date": "2026-07-21T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2026-07-29T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen"
        },
        {
          "date": "2026-08-03T22:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2026-08-04T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-08-09T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2026-08-10T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        }
      ],
      "status": "final",
      "version": "9"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "IBM License Metric Tool",
            "product": {
              "name": "IBM License Metric Tool",
              "product_id": "T029071",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:license_metric_tool:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c3.3.12",
                "product": {
                  "name": "Open Source Ruby \u003c3.3.12",
                  "product_id": "T056704"
                }
              },
              {
                "category": "product_version",
                "name": "3.3.12",
                "product": {
                  "name": "Open Source Ruby 3.3.12",
                  "product_id": "T056704-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ruby-lang:ruby:3.3.12"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Ruby"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T056236",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "RESF Rocky Linux",
            "product": {
              "name": "RESF Rocky Linux",
              "product_id": "T054581",
              "product_identification_helper": {
                "cpe": "cpe:/o:resf:rocky_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "RESF"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T054646",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T055947",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-41316",
      "product_status": {
        "known_affected": [
          "T056236",
          "2951",
          "T054581",
          "67646",
          "T056704",
          "T055947",
          "T029071",
          "T054646"
        ]
      },
      "release_date": "2026-07-15T22:00:00.000+00:00",
      "title": "CVE-2026-41316"
    },
    {
      "cve": "CVE-2026-42245",
      "product_status": {
        "known_affected": [
          "T056236",
          "2951",
          "T054581",
          "67646",
          "T056704",
          "T055947",
          "T029071",
          "T054646"
        ]
      },
      "release_date": "2026-07-15T22:00:00.000+00:00",
      "title": "CVE-2026-42245"
    },
    {
      "cve": "CVE-2026-42246",
      "product_status": {
        "known_affected": [
          "T056236",
          "2951",
          "T054581",
          "67646",
          "T056704",
          "T055947",
          "T029071",
          "T054646"
        ]
      },
      "release_date": "2026-07-15T22:00:00.000+00:00",
      "title": "CVE-2026-42246"
    },
    {
      "cve": "CVE-2026-42256",
      "product_status": {
        "known_affected": [
          "T056236",
          "2951",
          "T054581",
          "67646",
          "T056704",
          "T055947",
          "T029071",
          "T054646"
        ]
      },
      "release_date": "2026-07-15T22:00:00.000+00:00",
      "title": "CVE-2026-42256"
    },
    {
      "cve": "CVE-2026-42257",
      "product_status": {
        "known_affected": [
          "T056236",
          "2951",
          "T054581",
          "67646",
          "T056704",
          "T055947",
          "T029071",
          "T054646"
        ]
      },
      "release_date": "2026-07-15T22:00:00.000+00:00",
      "title": "CVE-2026-42257"
    },
    {
      "cve": "CVE-2026-42258",
      "product_status": {
        "known_affected": [
          "T056236",
          "2951",
          "T054581",
          "67646",
          "T056704",
          "T055947",
          "T029071",
          "T054646"
        ]
      },
      "release_date": "2026-07-15T22:00:00.000+00:00",
      "title": "CVE-2026-42258"
    },
    {
      "cve": "CVE-2026-47240",
      "product_status": {
        "known_affected": [
          "T056236",
          "2951",
          "T054581",
          "67646",
          "T056704",
          "T055947",
          "T029071",
          "T054646"
        ]
      },
      "release_date": "2026-07-15T22:00:00.000+00:00",
      "title": "CVE-2026-47240"
    },
    {
      "cve": "CVE-2026-47241",
      "product_status": {
        "known_affected": [
          "T056236",
          "2951",
          "T054581",
          "67646",
          "T056704",
          "T055947",
          "T029071",
          "T054646"
        ]
      },
      "release_date": "2026-07-15T22:00:00.000+00:00",
      "title": "CVE-2026-47241"
    },
    {
      "cve": "CVE-2026-47242",
      "product_status": {
        "known_affected": [
          "T056236",
          "2951",
          "T054581",
          "67646",
          "T056704",
          "T055947",
          "T029071",
          "T054646"
        ]
      },
      "release_date": "2026-07-15T22:00:00.000+00:00",
      "title": "CVE-2026-47242"
    }
  ]
}